Skip to main content
Connect GCP to Seemplicity

Define a connection to your GCP account to interface with Seemplicity.

A
Written by Alon Prigat
Updated over a week ago

This article provides instructions for ingesting Findings from GCP Security Command Center and Google Workspace Alert Center.

Before starting this process, make sure that you have admin permissions for GCP Console and Google Workspace.

Create a Service Account

  1. Under the project for which you want to ingest Findings, navigate to IAM & Admin -> Service Accounts.

  2. Click + CREATE SERVICE ACCOUNT.

  3. Configure the service account settings.

  4. Enter a meaningful name.

  5. Enter a description.

  6. (Optional) Modify the service account ID. You can keep the default service account ID.

  7. Click DONE.

Add a key for the service account

After creating the service account, you are sent to the Service Accounts page.

  1. Under the Actions column, click the menu icon and select Manage keys.

  2. Click ADD KEY > Create new key.

  3. Select JSON and click CREATE. The JSON file with your credentials will be downloaded to your computer.

Enable Domain-wide Delegation

  1. Go to Service Accounts.

  2. Locate the service account you created and in the Actions section click the menu icon.

  3. Select Manage details.

  4. Under Advanced Settings, copy the client ID in the DOMAIN-WIDE DELEGATION section. This is required for delegating access to your account.

  5. Click View Google Workspace Admin Console.

  6. Google Workspace domain’s Admin console, select Security -> Access and data control -> API controls.

  7. In the Domain wide delegation pane, select Manage Domain Wide Delegation.

  8. Click Add new.

  9. Paste the Client ID that you copied above.

  10. In the OAuth Scopes field, enter a comma-separated list of the scopes you want to use:

    1. For Google Workspace Alert Center, select Monitoring AlertPolicy Viewer.

    2. For GCP Security Command Center, select Security Center Admin Viewer.

  11. Click Authorize.

Enable APIs

After authorizing access, you must enable the API for each service.

  1. Navigate to the GCP Console.

  2. From the menu, select APIs & Services -> Enable APIs and Services.

  3. Click + Enable APIs and Services.

    A screenshot of a social media post

Description automatically generated
  4. In the API Library, select the service for which you want to enable the API.

  5. Click Enable.

Configure the Data Source in Seemplicity

  1. Navigate to Settings -> Data Sources.

  2. Under All Data Sources, locate the Google data source with which you want integrate and click Integrate.

  3. Enter a name and email address for this data source.

  4. In the Credentials JSON field, copy the contents of the JSON file you downloaded here.

Did this answer your question?