Google Cloud Platform (GCP) provides an extensive suite of cloud computing services including compute, data storage, data analytics and machine learning. The Balbix integration with GCP ingests data from core services such as GCP Compute, GCP Storage, GCP SQL, GKE Cluster & Deployments, GCP Functions, GCP KMS, GCP Pub/Sub and GCP Secrets Manager.
Balbix leverages AI to aggregate, normalize, and deduplicate ingested data, along with information integrated from your existing IT and cybersecurity tools. This creates a unified view of your entire asset inventory, including vulnerabilities and their business and operational context. Balbix’s AI models then analyze this data to provide insights such as deployment gap analysis, risk-based vulnerability prioritization (with detailed ranking and scoring), and risk quantification. This process delivers a comprehensive assessment of risk, whether for a single asset, groups of assets, or your entire enterprise, enabling more informed and effective security decisions.
Integration summary
This table provides a summary of the Balbix integration for the GCP connector.
Integration Type | Fetch: An inbound API integration used to fetch cloud assets, misconfigurations, and tags. |
Types of Assets Fetched | Infrastructure cloud resources like virtual machines, databases, containers, serverless functions, identity and access management resources |
Types of Data Fetched | Asset names, hardware information, interface information (MAC address, IP address), OS information, BIOS information, system information, all relevant timestamps (e.g., first observed, last observed), tags |
Prerequisites
To configure the Balbix connector, you must first create Google Cloud Platform API credentials with the appropriate permissions. These credentials are required for completing the configuration process.
Log in to the GCP Console and choose Project from the drop-down menu.
Choose Service Accounts from the IAM & Admin menu.
Click + Create Service Account in the Service accounts page.
Provide Balbix GCP Audit as Service account name.
Click Create And Continue.
Choose Basic from the Quick Access option in the Select a Role drop-down menu.
Select Viewer in the Role list and click DONE.
Select and click the email with the role name Balbix GCP Audit from the Service Accounts list.
In the Keys tab, choose Create new key from the ADD KEY dropdown.
Select JSON and click CREATE. A JSON key file will download to your computer. You will need this file to upload in the connector configuration step.
Set up your GCP connector
After you have completed the prerequisites, follow these steps to create and configure your Balbix connector for Google Cloud Platform (GCP).
GCP Cloud Services Supported
The following cloud services are ingested as assets via this connector:
Cloud Functions |
Cloud Key Management Service (Cloud KMS) |
Cloud SQL |
Cloud Storage |
Compute Engine |
GCP IAM |
Google Kubernetes Engine (GKE) |
Pub/Sub |
Secret Manager |
API reference documentation
To learn more about the GCP API, see the references listed below: