gcp-logging-sink-filter-destination
Log sink filters and destinations disclose internal resource names, selectors, and export targets.
Where it sits
| location | logging.projects.sinks.get.{filter,destination} |
| location kind | config_field |
| data kinds | sensitive_data pii |
| emits edge | ContainsSecret |
| service | Cloud Logging / Audit Logs (gcp:logging) |
Collection recipe
| access mode | read_api |
| operation | logging.projects.sinks.get |
| response path | {filter,destination} |
| encoding | string |
| params | {"name": "\u003cresource-name\u003e"} |
Required permissions
References