gcp-logging-log-entry-labels
Log labels and HTTP request metadata can contain user identities, URLs, and mistakenly propagated credentials.
Where it sits
| location | logging.entries.list.entries[].{labels.<value>,resource.labels.<value>,httpRequest} |
|---|---|
| location kind | metadata |
| data kinds | credential pii sensitive_data |
| emits edge | ContainsSecret |
| service | Cloud Logging / Audit Logs (gcp:logging) |
Collection recipe
| access mode | read_api |
|---|---|
| operation | logging.entries.list |
| response path | entries[].{labels.<value>,resource.labels.<value>,httpRequest} |
| encoding | json |
| params | {"name": "\u003cresource-name\u003e"} |
Required permissions
logging.logEntries.list