From fa9460491a7ee17ae61c169a8621f149482e0116 Mon Sep 17 00:00:00 2001 From: Nick Young Date: Wed, 21 Oct 2020 13:08:56 +0000 Subject: [PATCH] minor edits for readme, removing reference to appscript project creation. --- README.md | 23 +++++++++++++---------- 1 file changed, 13 insertions(+), 10 deletions(-) diff --git a/README.md b/README.md index 9ef96a0..023907d 100644 --- a/README.md +++ b/README.md @@ -8,6 +8,12 @@ This repo will let you audit all the IAM settings on projects in the GCP organiz Create the a Virtual Machine (VM) in the Google Compute Engine dashboard. +**NOTE:** You are allowed [1 free F1-micro instance per month](https://cloud.google.com/free/) in your Google environment. + +If you don't see the ability to create an F1-micro instance from the dashboard, you can use the following example command in Cloud Shell to create one: + +```gcloud compute instances create --machine-type=f1-micro --zone=us-east1-b``` + Once the VM instance has been created, stop the VM instance and change the following setting: Cloud API access scopes @@ -26,18 +32,14 @@ Install pip3: Install pandas: ```sudo pip install pandas``` -**NOTE:** You are allowed [1 free F1-micro instance per month](https://cloud.google.com/free/) in your Google environment. - -If you don't see the ability to create an F1-micro instance from the dashboard, you can use the following example command in Cloud Shell to create one: -```gcloud compute instances create --machine-type=f1-micro --zone=us-east1-b``` ### IAM Role ### The service account running the machine will need to have rights to query the organization, folders, and projects for the IAM policies. -Create a role under the main organization with the following permissions: +Create a role under the main organization (at the root level) with the following permissions: orgpolicy.policy.get resourcemanager.folders.get @@ -52,12 +54,9 @@ Once the role has been created, add the VM instance's service account to the rol ### Create BigQuery Table ### -Create a table for the audit to push to. If you are using separate projects for BigQuery and Compute Engine, you may need to allow the service account permissions to create jobs and insert data into the table. - -### Create the AppScript Project ### - -Log into [AppScript](https://script.google.com) and create a new project. Take note of the project ID for later use. +Create a new BigQuery table for this process to dump information to. +Note: If you are using separate projects for BigQuery and Compute Engine, you may need to allow the service account permissions to create jobs and insert data into the table. ### Install & Configure ### @@ -79,7 +78,11 @@ Use crontab (or your favorite scheduler) to execute the script on your desired s ### Who do I talk to? ### * Nick Young +* Enterprise Analytics Architect +* University of North Carolina at Greensboro * nickyoung@uncg.edu * Tim Watts +* Integrations Specialist +* University of North Carolina at Greensboro * timwatts@uncg.edu \ No newline at end of file