gcp-logging-saved-query-text

Saved Logs Explorer queries may contain literal identifiers or sensitive search values.

gcphigh service: gcp:logging emits ContainsSecret

Where it sits

locationlogging.projects.locations.savedQueries.get.loggingQuery.filter
location kindquery_text
data kindscredential pii sensitive_data
emits edgeContainsSecret
serviceCloud Logging / Audit Logs (gcp:logging)

Collection recipe

access moderead_api
operationlogging.projects.locations.savedQueries.get
response pathloggingQuery.filter
encodingstring
params{"name": "\u003cresource-name\u003e"}

Required permissions

logging.queries.getShared

References

move · open · esc close