gcp-logging-sink-filter-destination

Log sink filters and destinations disclose internal resource names, selectors, and export targets.

gcpmedium service: gcp:logging emits ContainsSecret

Where it sits

locationlogging.projects.sinks.get.{filter,destination}
location kindconfig_field
data kindssensitive_data pii
emits edgeContainsSecret
serviceCloud Logging / Audit Logs (gcp:logging)

Collection recipe

access moderead_api
operationlogging.projects.sinks.get
response path{filter,destination}
encodingstring
params{"name": "\u003cresource-name\u003e"}

Required permissions

logging.sinks.get

References

move · open · esc close