gcp-cloudarmor-rule-expression
Cloud Armor CEL expressions can include sensitive hostnames, paths, identifiers, or literal values.
Where it sits
| location | compute.securityPolicies.get.rules[].match.expr.expression |
|---|
| location kind | policy_document |
|---|
| data kinds | credential api_key sensitive_data pii |
|---|
| emits edge | ContainsSecret |
|---|
| service | Cloud Armor (gcp:cloudarmor) |
|---|
Collection recipe
| access mode | read_api |
|---|
| operation | compute.securityPolicies.get |
|---|
| response path | rules[].match.expr.expression |
|---|
| encoding | string |
|---|
| params | {"project": "\u003cproject\u003e", "securityPolicy": "\u003cpolicy\u003e"} |
|---|
Required permissions
compute.securityPolicies.get
References