gcp-eventarc-explicit-bus-has-policy
An Eventarc Advanced message bus has an IAM allow policy governing who may publish to it.
match (record)
{
"api": "eventarc.projects.locations.messageBuses.getIamPolicy",
"field": "bindings"
}
emit
| source type | EventBus |
|---|---|
| target type | Policy |
| source | <Eventarc message bus node (EventBus)> |
| target | <message bus ResourcePolicy node> |
Narrative
{bus.name} has an IAM allow policy controlling who may publish events to it.
Raw rule rules/explicit/gcp-eventarc.yaml
id: gcp-eventarc-explicit-bus-has-policy
emits: HasPolicy
description: An Eventarc Advanced message bus has an IAM allow policy governing who may publish to it.
match_record:
api: eventarc.projects.locations.messageBuses.getIamPolicy
field: bindings
emit:
source_type: EventBus
target_type: Policy
source: <Eventarc message bus node (EventBus)>
target: <message bus ResourcePolicy node>
narrative: '{bus.name} has an IAM allow policy controlling who may publish events to it.'