🧹 gracefully handle 403 when fetching gcp org (#5136)

mondoohq · Jan 31, 2025 · 4c1b4a0 · 4c1b4a0
1 parent 05f5a47
commit 4c1b4a0
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/providers/gcp/resources/organization.go b/providers/gcp/resources/organization.go
@@ -17,6 +17,7 @@ import (
 	"github.com/rs/zerolog/log"
 	"google.golang.org/api/cloudresourcemanager/v3"
 	"google.golang.org/api/compute/v1"
+	"google.golang.org/api/googleapi"
 	"google.golang.org/api/iam/v1"
 	"google.golang.org/api/option"
 )
@@ -60,6 +61,12 @@ func initGcpOrganization(runtime *plugin.Runtime, args map[string]*llx.RawData)
 	name := "organizations/" + orgId
 	org, err := svc.Organizations.Get(name).Do()
 	if err != nil {
+		if e, ok := err.(*googleapi.Error); ok {
+			if e.Code == 403 {
+				log.Error().Err(err).Msg("cannot fetch organization info")
+				return nil, nil, errors.New("403: permission denied")
+			}
+		}
 		return nil, nil, err
 	}