Terraform Modules for Google Cloud Logs

Overview

This repository contains the following Terraform modules for Google Cloud Platform logs.

These modules automate the creation of the GCP Log Router sinks, Pub/Sub infrastructure, and Workload Identity Federation needed to stream GCP logs to Upwind for centralized observability and threat detection.

Modules

• modules/gcp-audit-logs/ - Streams GCP Cloud Audit Logs to Upwind via a Log Router sink, Pub/Sub, and Workload Identity Federation. Supports organization, folder, and project scope.

Examples

Complete usage examples are available in the examples directory:

• gcp-audit-logs - Organization-wide audit log streaming

Usage

module "gcp_audit_logs" {
  source = "upwindsecurity/cloudlogs/google//modules/gcp-audit-logs"

  gcp_organization_id        = "YOUR_ORG_ID"
  infrastructure_project_id  = "YOUR_PROJECT_ID"
  upwind_management_sa_email = "upwind-mgmt-xxxxx@your-project.iam.gserviceaccount.com"
}

See examples/gcp-audit-logs for a full example, and the module README for all variables.

Contributing

We welcome contributions! Please see our CONTRIBUTING.md guide for details on:

• Development setup and workflows
• Testing procedures
• Code standards and best practices
• How to add new submodules

For bug reports and feature requests, please use GitHub Issues.

Versioning

We use Semantic Versioning for releases. For the versions available, see the tags on this repository.

Releases are created automatically by semantic-release on every merge to main. The commit message type determines the version bump:

• fix: → patch
• feat: → minor
• breaking change → major

License

This project is licensed under the Apache License 2.0. See the LICENSE file for details.

Support

• Documentation
• Issues
• Contributing Guide