I've been trying out cloud custodian and looking at this article trying the simplest thing using gcp-audit (all services/APIs needed are enabled)
policies:
- name: gcp-uniform-access-storage-remediation
resource: gcp.bucket
mode:
type: gcp-audit
methods:
- storage.buckets.create
- storage.buckets.update
filters:
- type: value
key: iamConfiguration.uniformBucketLevelAccess.enabled
value: false
actions:
- type: set-uniform-access
Running the policy seems like but when adding the function of gcp-audit it seems to fail and triggering the cloud function manually it just shows crash with no other information, has anyone had any similar issue? Appreciate any help.
It seems deleting the log sink router and re-deploy solves the issue for me