Skip to main content

GCP

Google Cloud Platform (GCP) is Google's comprehensive public cloud computing platform that provides infrastructure as a service (IaaS), platform as a service (PaaS), and software as a service (SaaS) offerings. GCP enables organizations to build, deploy, and scale applications, websites, and services on the same infrastructure that powers Google's own products.

CategoryCloud
DirectionQuery source
Sign-inGCP Credentials
Query languagesSQLite
Tables122
Query templates478
Websitegoogle.com

Before you start​

Huntbase signs in to GCP with GCP Credentials. Create the credential in GCP first, then keep it to hand for the Connect step.

  1. In the Google Cloud console, open the Create service account page and select your project.
  2. Enter a service account name, click Create and continue, grant the Viewer role, then click Continue and Done.
  3. Open the new service account, go to the Keys tab, and choose Add key › Create new key.
  4. Select JSON and click Create. The key file downloads once and cannot be downloaded again.

Permissions:

  • Viewer
Watch out for
  • The Viewer role does not include IAM policy reads such as storage.buckets.getIamPolicy. Add them with a custom role if you need them.
  • The iam.disableServiceAccountKeyCreation organization policy blocks key creation. It is on by default for organizations created on or after May 3, 2024.
  • Creating keys needs the Service Account Key Admin role.

For the vendor's own instructions, see Google Cloud service account key documentation.

tip

Use a dedicated, read-only credential for Huntbase where the product allows it. Huntbase only needs to read.

Connect GCP​

  1. Go to Connections and click New connection, or click New connection on the GCP product page.
  2. On Product, pick GCP and choose the Owner.
  3. On Details, give the connection a Name and, optionally, a Description.
  4. On Connect, fill in the settings and credentials described below.
  5. On Verify, review the summary and click Create & check.

For everything else on the setup page — saving a draft, I'll do this later, and what each check result means — see Connections.

Settings​

Where your GCP lives:

FieldRequiredNotes
GCP Project IDYesThe project ID string, not the project name or number.

Credentials​

The only Method is GCP Credentials. Enter a Credential label (for example Production), then fill in:

FieldRequiredNotes
GCP CredentialsYesPaste the full contents of the downloaded JSON key file. Secret — not shown again after you save it.

Query it​

Once connected, GCP can serve these languages in a query tab, and Scout can use it when you ask in Auto:

LanguageUse it for
SQLiteSQL over the 122 tables listed below, alongside every other connected source.

Example: SQLite​

GCP project service inventory — List all services associated with a GCP project.

select
  *
from
  gcp_project_service;

GCP ships with 478 query templates. Find them in Library › Queries — see Query templates.

What syncs automatically​

GCP comes with a content pack. These queries run on a schedule on each new connection so the entities they find appear in the Activity Feed without you asking. You can turn syncing off from the connection's Synchronisation Settings card.

QueryFinds
Sync service accountsuser
Sync GKE clustersendpoint, location
Sync projectsorganization
Sync compute firewall rulesfirewall rule
Sync Cloud Functions service account rolesgroup, user

Tables​

GCP adds 122 tables. Browse their columns from Schema in the query bar's ⋯ menu.

All 122 tables
TableContains
gcp_alloydb_clusterGCP AlloyDB Cluster
gcp_alloydb_instanceGCP AlloyDB Instance
gcp_apikeys_keyGCP API Keys Key
gcp_app_engine_applicationGCP App Engine Application
gcp_artifact_registry_repositoryGCP Artifact Registry Repository
gcp_audit_policyGCP Audit Policy
gcp_bigquery_datasetGCP BigQuery Dataset
gcp_bigquery_jobGCP BigQuery Job
gcp_bigquery_tableGCP Bigquery Table
gcp_bigtable_instanceGCP Bigtable Instance
gcp_billing_accountGCP Billing Account
gcp_billing_budgetGCP Billing Budget
gcp_cloud_assetGCP Cloud Asset
gcp_cloud_identity_groupGCP Cloud Identity Group
gcp_cloud_identity_group_membershipGCP Cloud Identity Group Membership
gcp_cloud_run_jobGCP Cloud Run Job
gcp_cloud_run_serviceGCP Cloud Run Service
gcp_cloudfunctions_functionGCP Cloud Function
gcp_composer_environmentGCP Composer Environment
gcp_compute_addressGCP Compute Address
gcp_compute_autoscalerGCP Compute Autoscaler
gcp_compute_backend_bucketGCP Compute Backend Bucket
gcp_compute_backend_serviceGCP Compute Backend Service
gcp_compute_diskGCP Compute Disk
gcp_compute_disk_metric_read_opsGCP Compute Disk Metrics - Read Ops
gcp_compute_disk_metric_read_ops_dailyGCP Compute Disk Metrics - Read Ops (Daily)
gcp_compute_disk_metric_read_ops_hourlyGCP Compute Disk Metrics - Read Ops (Hourly)
gcp_compute_disk_metric_write_opsGCP Compute Disk Metrics - Write Ops
gcp_compute_disk_metric_write_ops_dailyGCP Compute Disk Metrics - Write Ops (Daily)
gcp_compute_disk_metric_write_ops_hourlyGCP Compute Disk Metrics - Write Ops (Hourly)
gcp_compute_firewallGCP Compute Firewall
gcp_compute_forwarding_ruleGCP Compute Forwarding Rule
gcp_compute_global_addressGCP Compute Global Address
gcp_compute_global_forwarding_ruleGCP Compute Global Forwarding Rule
gcp_compute_ha_vpn_gatewayGCP Compute VPN Gateway
gcp_compute_imageGCP Compute Image
gcp_compute_instanceGCP Compute Instance
gcp_compute_instance_groupGCP Compute Instance Group
gcp_compute_instance_group_managerGCP Compute Instance Group Manager
gcp_compute_instance_metric_cpu_utilizationGCP Compute Instance Metrics - CPU Utilization
gcp_compute_instance_metric_cpu_utilization_dailyGCP Compute Instance Metrics - CPU Utilization (Daily)
gcp_compute_instance_metric_cpu_utilization_hourlyGCP Compute Instance Metrics - CPU Utilization (Hourly)
gcp_compute_instance_templateGCP Compute Instance Template
gcp_compute_machine_imageGCP Compute Machine Image
gcp_compute_machine_typeGCP Compute Machine Type
gcp_compute_networkGCP Compute Network
gcp_compute_node_groupGCP Compute Node Group
gcp_compute_node_templateGCP Compute Node Template
gcp_compute_project_metadataGCP Compute Project Metadata
gcp_compute_regionGCP Compute Region
gcp_compute_resource_policyGCP Compute Resource Policy
gcp_compute_routerGCP Compute Router
gcp_compute_security_policyGCP Armor Security Policy
gcp_compute_snapshotGCP Compute Snapshot
gcp_compute_ssl_policyGCP Compute SSL Policy
gcp_compute_subnetworkGCP Compute Subnetwork
gcp_compute_target_https_proxyGCP Compute Target Https Proxy
gcp_compute_target_poolGCP Compute Target Pool
gcp_compute_target_ssl_proxyGCP Compute Target SSL Proxy
gcp_compute_target_vpn_gatewayGCP Compute Target VPN Gateway
gcp_compute_tpu[DEPRECATED] GCP Compute TPUs are specialized hardware accelerators designed to speed up specific machine learning workloads.
gcp_compute_url_mapGCP Compute URL Map
gcp_compute_vpn_tunnelGCP Compute VPN Tunnel
gcp_compute_zoneGCP Compute Zone
gcp_dataplex_assetGCP Dataplex Asset
gcp_dataplex_lakeGCP Dataplex Lake
gcp_dataplex_taskGCP Dataplex Task
gcp_dataplex_zoneGCP Dataplex Zone
gcp_dataproc_clusterGCP Dataproc Cluster
gcp_dataproc_metastore_serviceGCP Dataproc Metastore Service
gcp_dns_managed_zoneGCP DNS Managed Zone
gcp_dns_policyGCP DNS Policy
gcp_dns_record_setGCP DNS Record Set
gcp_firestore_databaseGCP Firestore Database
gcp_iam_policyGCP IAM Policy
gcp_iam_roleGCP IAM Role
gcp_kms_keyGCP KMS Key
gcp_kms_key_ringGCP KMS Key Ring
gcp_kms_key_versionGCP KMS Key Version
gcp_kubernetes_clusterGCP Kubernetes Cluster
gcp_kubernetes_node_poolGCP Kubernetes Node Pool
gcp_logging_bucketGCP Logging Bucket
gcp_logging_exclusionGCP Logging Exclusion
gcp_logging_log_entryGCP Logging Log Entry
gcp_logging_metricGCP Logging Metric
gcp_logging_sinkGCP Logging Sink
gcp_monitoring_alert_policyGCP Monitoring Alert Policy
gcp_monitoring_groupGCP Monitoring Group
gcp_monitoring_notification_channelGCP Monitoring Notification Channel
gcp_organizationGCP Organization
gcp_organization_audit_policyGCP Organization Audit Policy
gcp_organization_projectGCP Organization Project
gcp_projectGCP Project
gcp_project_organization_policyGCP Project Organization Policy
gcp_project_serviceGCP Project Service
gcp_pubsub_snapshotGCP Pub/Sub Snapshot
gcp_pubsub_subscriptionGCP Pub/Sub Subscription
gcp_pubsub_topicGCP Pub/Sub Topic
gcp_redis_clusterGCP Redis Cluster
gcp_redis_instanceGCP Redis Instance
gcp_secret_manager_secretGCP Secret Manager Secret
gcp_service_accountGCP Service Account
gcp_service_account_keyGCP Service Account Key
gcp_sql_backupGCP SQL Backup
gcp_sql_databaseGCP SQL Database
gcp_sql_database_instanceGCP SQL Database Instance
gcp_sql_database_instance_metric_connectionsGCP SQL Database Instance Metrics Connections
gcp_sql_database_instance_metric_connections_dailyGCP SQL Database Instance Metrics - Connections (Daily)
gcp_sql_database_instance_metric_connections_hourlyGCP SQL Database Instance Metrics - Connections (Hourly)
gcp_sql_database_instance_metric_cpu_utilizationGCP SQL Database Instance Metrics - CPU Utilization
gcp_sql_database_instance_metric_cpu_utilization_dailyGCP SQL Database Instance Metrics - CPU Utilization (Daily)
gcp_sql_database_instance_metric_cpu_utilization_hourlyGCP SQL Database Instance Metrics - CPU Utilization (Hourly)
gcp_storage_bucketGCP Storage Bucket
gcp_storage_objectGCP Storage Object
gcp_tag_bindingGCP Tag Binding
gcp_tpu_vmGCP TPU VMs are specialized hardware accelerators designed to speed up specific machine learning workloads.
gcp_vertex_ai_endpointGCP Vertex AI Endpoint
gcp_vertex_ai_modelGCP Vertex AI Model
gcp_vertex_ai_notebook_runtime_templateGCP Vertex AI Notebook Runtime Template
gcp_vpc_access_connectorGCP VPC Access Connector
gcp_workstations_workstationGCP Workstations workstation
gcp_workstations_workstation_clusterGCP Workstations Workstation Cluster

Next steps​