GCP Resource Discovery Tool

The GCP Resource Discovery Tool is essential for customers who want to assess which of their GCP resources can be integrated with Red Canary. By using this tool, users can enumerate all resources within their GCP tenant, providing a clear picture of what assets are available for integration so that a Red Canary sales representative can provide quoting information.

Prerequisites

• You must have cloudasset.assets.searchAllResources permissions within a GCP Project or Organization name.

Bash

Red Canary uses Bash to accomplish this task, particularly the gcloud command line interface (CLI), which searches asset resources for a specified Project or Organization. GCP users will likely have at least one person skilled in Bash. Additionally, GCP CloudShell may be used to run the Bash script directly within the GCP Management Console.

Step 1: Run the script

1. Navigate to your GCP cloud console.

2. From the menu bar, click Activate Cloud Shell.

   

3. From the CloudShell Menu, click the extended menu and then click Upload.

   

4. Navigate to the location of the script, which you will have received from a Red Canary representative. You can also click here to download the script.

5. Select the script from the previous step (cont_billable_resources.sh).

6. At the prompt, enter ls -l.

7. The count_billable_resources.sh should appear in the listing.

   

8. At the prompt, enter chmod +x count_billable_resources.sh to assign the correct permissions so the script can be executed.

   

9. Once you’ve identified the Organization or Project the script should be run for, enter the following at the bash prompt:

   ./count_billable_resources.sh organizations/<ORGANIZATION_ID> or ./count_billable_resources.sh projects/<PROJECT_ID>