Skip to content

Commit

Permalink
Merge pull request #130 from rtkwlf/nshawahna/AWN-194889
Browse files Browse the repository at this point in the history 
[AWN-194889] Edit image path
  • Loading branch information
@nuhasha
nuhasha authored Apr 17, 2023
2 parents 22ac1c2 + 8616001 commit 3ccd6b0
Showing 1 changed file with 9 additions and 9 deletions.
18 changes: 9 additions & 9 deletions en/google/resourcemanager/detailed-audit-logging-mode.md
View file
Original file line number Diff line number Diff line change
Expand Up @@ -15,15 +15,15 @@
| **Recommended Action** | Ensure that "Detailed Audit Logging Mode" constraint is enforced at the organization level. |

## Detailed Remediation Steps
1. Sign in to Google Cloud Management Console with the organizational unit credentials, then Click the deployment selector in the upper navigation bar.</br></br> <img src="/resources/google/resourcemanager/disable-service-account-key-creation/step1.png"/></br>
2. Select ALL to view a summary of all current deployments, and then pick the Google Cloud organisation you want to look at.</br></br> <img src="/resources/google/resourcemanager/disable-service-account-key-creation/step2.png"/></br>
1. Sign in to Google Cloud Management Console with the organizational unit credentials, then Click the deployment selector in the upper navigation bar.</br></br> <img src="/resources/google/resourcemanager/detailed-audit-logging-mode/step1.png"/></br>
2. Select ALL to view a summary of all current deployments, and then pick the Google Cloud organisation you want to look at.</br></br> <img src="/resources/google/resourcemanager/detailed-audit-logging-mode/step2.png"/></br>
3. Navigate to [Identity and Access Management IAM](https://console.cloud.google.com/iam-admin/iam).
4. In the left navigation panel, select Organization Policies to view the list of the constraint policies available for your GCP organization.</br> <img src="/resources/google/resourcemanager/disable-service-account-key-creation/step4.png"/></br></br>
4. In the left navigation panel, select Organization Policies to view the list of the constraint policies available for your GCP organization.</br> <img src="/resources/google/resourcemanager/detailed-audit-logging-mode/step4.png"/></br></br>
5. Click inside Filter box, filter by **Name**. </br>
6. Type in **Detailed Audit Logging Mode** to return the \"Detailed Audit Logging Mode\" policy.</br><img src="/resources/google/resourcemanager/disable-service-account-key-creation/step6.png"/></br></br>
7. Click on the policy name. </br> <img src="/resources/google/resourcemanager/disable-service-account-key-creation/step7.png"/></br></br>
8. On the Policy details page, check the **Status** attribute value. If the **Status** attribute value is set to **Not enforced**, then click on \"Manage Policy\" to edit the policy.</br> <img src="/resources/google/resourcemanager/disable-service-account-key-creation/step8.png"/></br></br>
6. Type in **Detailed Audit Logging Mode** to return the \"Detailed Audit Logging Mode\" policy.</br><img src="/resources/google/resourcemanager/detailed-audit-logging-mode/step6.png"/></br></br>
7. Click on the policy name. </br> <img src="/resources/google/resourcemanager/detailed-audit-logging-mode/step7.png"/></br></br>
8. On the Policy details page, check the **Status** attribute value. If the **Status** attribute value is set to **Not enforced**, then click on \"Manage Policy\" to edit the policy.</br> <img src="/resources/google/resourcemanager/detailed-audit-logging-mode/step8.png"/></br></br>
9. In Edit Policy screen, under \"Applies to\" section, select \"Customize\". Then Click on \"Add Role\".
10. In Add Role expanded Section, under enforcemnt: Select "On".</br></br> <img src="/resources/google/resourcemanager/disable-service-account-key-creation/step10.png"/></br>
11. Click Save. </br> <img src="/resources/google/resourcemanager/disable-service-account-key-creation/step11.png"/></br>
12. When return to Policy details screen, status will now show "Enforced". </br> <img src="/resources/google/resourcemanager/disable-service-account-key-creation/step12.png"/></br>
10. In Add Role expanded Section, under enforcemnt: Select "On".</br></br> <img src="/resources/google/resourcemanager/detailed-audit-logging-mode/step10.png"/></br>
11. Click Save. </br> <img src="/resources/google/resourcemanager/detailed-audit-logging-mode/step11.png"/></br>
12. When return to Policy details screen, status will now show "Enforced". </br> <img src="/resources/google/resourcemanager/detailed-audit-logging-mode/step12.png"/></br>

0 comments on commit 3ccd6b0

Please sign in to comment.