chore: enable iap audit logs

GaloyMoney · Jan 31, 2024 · db4f74a · db4f74a
1 parent 84f6d46
commit db4f74a
Showing 1 changed file with 14 additions and 0 deletions.
diff --git a/modules/inception/gcp/bastion.tf b/modules/inception/gcp/bastion.tf
@@ -101,3 +101,17 @@ resource "google_compute_firewall" "bastion_allow_iap_inbound" {
     ports    = [22]
   }
 }
+
+resource "google_project_iam_audit_config" "iap_audit_logs" {
+  project = local.project
+  service = "iap.googleapis.com"
+  audit_log_config {
+    log_type = "ADMIN_READ"
+  }
+  audit_log_config {
+    log_type = "DATA_READ"
+  }
+  audit_log_config {
+    log_type = "DATA_WRITE"
+  }
+}