Enable GCP Audit logging using Terraform

Subash Chandran 2 months ago Leave a Comment

Data Access Audit logs are disabled by default as its cost depends on the usage. To enable them using Terraform we can use the following script.

Advertisements

resource "google_project_iam_audit_config" "all-services" {
  project = "<your project>"
  service = "allServices"
  audit_log_config {
    log_type = "ADMIN_READ"
  }
  audit_log_config {
    log_type = "DATA_READ"
  }
  audit_log_config {
    log_type = "DATA_WRITE"
  }
}