Onboard GCP Cloud Account in SCM
Focus
Focus
AI Runtime Security

Onboard GCP Cloud Account in SCM

Table of Contents


Onboard GCP Cloud Account in SCM

Onboard your GCP cloud account in Strata Cloud Manager (SCM).
Onboard the GCP cloud account in SCM and create a Terraform configuration to generate a service account to discover cloud assets and manage AI Runtime Security instances.
Where Can I Use This?What Do I Need?
  • Creating a GCP Service Account for SCM Integration
  1. Log in to SCM.
  2. Select Insights → AI Runtime Security.
    1. If you are onboarding a cloud account for the first time, click Get Started.
    2. If you have previously onboarded a cloud account, click the Cloud Account Manager (cloud) icon.
  3. Select Cloud Service Provider as GCP and select Next.
  4. Enter basic information:
    • A unique Name to identify your onboarded cloud account.
    • The GCP Project ID.
    • The Storage Bucket Name you created in the Create a Cloud Storage Bucket prerequisite step.
    Select Next.
  5. In Application Definition, select Next.
    The namespace shows applications from Pods/Cluster workloads, while VPC/VNETs display applications from virtual machine workloads.
  6. Input Service Account Name and Download Terraform.
    Please use one service account per project.
  7. Unzip the downloaded Terraform zip file and follow the `README.md` file for instructions:
    cd <unzipped-folder>/gcp terraform init terraform plan terraform apply
    Provide the required IAM Permissions to the user executing the Terraform template.
  8. Select Done.
    This validates the successful creation of a service account in GCP.
    After successfully connecting to the cloud service provider with the specified service account, the AI Runtime Security instance gathers cloud VM and Kubernetes workload IP tags from the Edge Service and tag collector, respectively. This discovery process can take up to 15 minutes before assets appear on the SCM Command Center dashboard.
  9. You can now view and manage the onboarded cloud accounts in SCM.
  10. The SCM dashboard under Insights → AI Runtime Security shows all the cloud assets discovered.
    Next, protect the network traffic flow by deploying an AI Runtime Security instance in GCP.