Adding a GCP Cloud Infrastructure Connection

Setting up Cloud Infrastructure Sync with Google Cloud Platform (GCP) takes less than 15 minutes. Once complete, we begin collecting your IPs and a self-published report is generated within 3-5 business days. We’ll scan your infrastructure multiple times per day and will make any updates that are consistent after two consecutive 24 hour periods. Assets added to infrastructure when a connection is set up have a 60-day grace period before they impact grading.

Prerequisites

Setup requires administrator access to your GCP account.

Setting up cloud sync without the correct permissions results in an error 401 Unauthorized.

Step 1: Add Account Info

1. Navigate to the Cloud Infrastructure Sync page in the Attack Surface section.
2. Select the Add Connection dropdown.
3. Select Google Cloud Platform (GCP).
4. Enter a name for the connection. Optionally, you may also enter a description. The name and description identify the connection; the self-published company can have a different name, and will be named in step 2.
5. Select Continue.

Step 2: Confirm Self-Published Company

A new self-published company based on the GCP infrastructure in the account you added will be created. This way, you can have a self-published company and rating for your GCP infrastructure.

Self-published companies are managed like any other subsidiary in your Ratings Tree. They’re classified as company-provided assets because the IPs are provided via an automated sync with your company.

1. Select a parent company for the self-published company.
2. Enter a name for the self-published company, e.g., “Saperix, Inc. GCP.”
3. Enter the primary domain associated with the parent.
4. Enter a description for the self-published company, e.g., “Saperix, Inc. GCP Infrastructure.”
5. Select a visibility setting for the self-published company. Cloud Infrastructure Sync assets impact your rating regardless of your choice during setup.
6. Select Continue.

Step 3: Set Up Sync Permissions

Set up permissions for a single GCP account or multiple accounts (e.g. all accounts).

White text: Set up a single account scan or any number of accounts you’d like to add.

This setup includes the minimum required permissions; we recommend leaving them as-is, but you may change or remove them as needed. Changing permissions may affect Cloud Infrastructure Sync's ability to monitor your cloud infrastructure.

1. Download the Configuration Instructions.
2. Complete the steps in the instructions.
3. Upload the JSON file generated during the configuration process.
4. Select Finish Adding Connection.