cloud_google_registration_settings

This resource manages settings for a Google Cloud registration in Falcon Cloud Security that may not be known until after the registration has been created, such as log ingestion and Workload Identity Federation (WIF) configuration.

API Scopes

The following API scopes are required:

• Cloud Security Google Cloud Registration: READ
• Cloud Security Google Cloud Registration: WRITE

Example Usage

terraform {
  required_providers {
    crowdstrike = {
      source = "registry.terraform.io/crowdstrike/crowdstrike"
    }
  }
}

provider "crowdstrike" {
  cloud = "us-2"
}

resource "crowdstrike_cloud_google_registration" "registration" {
  name               = "my-google-cloud-project-registration"
  projects           = ["my-google-cloud-project-id"]
  infra_project      = "my-infra-project-id"
  wif_project        = "my-wif-project-id"
  wif_project_number = "123456789012"

  realtime_visibility = {
    enabled = true
  }
}

resource "crowdstrike_cloud_google_registration_settings" "example" {
  registration_id                 = crowdstrike_cloud_google_registration.registration.id
  log_ingestion_sink_name         = "crowdstrike-log-sink"
  log_ingestion_topic_id          = "crowdstrike-log-topic"
  log_ingestion_subscription_name = "crowdstrike-log-subscription"
  wif_pool_name                   = "crowdstrike-wif-pool"
  wif_provider_name               = "crowdstrike-wif-provider"

  depends_on = [crowdstrike_cloud_google_registration.registration]
}

output "log_ingestion_settings" {
  value = crowdstrike_cloud_google_registration_settings.example
}

Schema

Required

• registration_id (String) The Google Cloud registration ID to configure settings for.

Optional

• log_ingestion_sink_name (String) The name of the log sink for ingestion.
• log_ingestion_subscription_name (String) The Pub/Sub subscription name for log ingestion.
• log_ingestion_topic_id (String) The Pub/Sub topic ID for log ingestion.
• wif_pool_name (String) The Workload Identity Federation (WIF) pool name.
• wif_provider_name (String) The Workload Identity Federation (WIF) provider name.

Import

Import is supported using the following syntax:

# The log ingestion settings for a previously registered Google Cloud project can be imported by registration ID.
terraform import crowdstrike_cloud_google_registration_settings.example <registration-id>