Open in ChatGPTOpen in Claude

Google workspace

Overview

Google Workspace provides detailed audit logs of user activities, such as logins, file sharing, and administrative actions. Monitor these logs to understand how your Google Workspace applications are being used, and optimize their efficiency and security.

How to use with Terraform

To deploy this integration using Terraform, you can use the coralogix_integration resource provided by the Coralogix Terraform provider. Below is an example configuration:

resource "coralogix_integration" "google-workspace-audit-logs-collector" {
  integration_key = "google-workspace-audit-logs-collector"
  version         = "0.2.2"

  parameters = {
    IntegrationName                 = "GoogleWorkspaceAdminLogs"
    ServiceAccountKey               = "<ServiceAccountKey>"
    ImpersonatedEmail               = "<ImpersonatedEmail>"
    GoogleWorkspaceApplicationNames = [ "admin", "login", "drive", "vault" ]
    ApplicationName                 = "<ApplicationName>"
  }
}

Replace the placeholder values with your actual configuration parameters. Refer to the parameter table below for required fields and their descriptions.

Revisions

Adds every application the Google Admin Reports API exposes, bringing GoogleWorkspaceApplicationNames to 41 options. New in this revision: vault, gcp, gmail, takeout, ldap, directory_sync, access_evaluation, admin_data_action, chrome_sync, classroom, assignments, cloud_search, contacts, data_migration, graduation, meet_hardware, profile, tasks, voice, and workspace_studio. The OAuth scopes you already granted cover all of them, so no re-authorization is needed.

Name	Type	Required	Description
ApplicationName	String	Yes	The application name for the integration
GoogleWorkspaceApplicationNames	List	Yes	Select the applications for which Coralogix will read the audit logs
ImpersonatedEmail	String	Yes	Enter a valid email address of a super admin user to be impersonated
IntegrationName	String	Yes
BillingProjectId	String	No	A caller-specified project for quota and billing purposes. The caller must have serviceusage.services.use permission on the project.
ServiceAccountKey	String	No
ServiceAccountTargetPrincipal	String	No	Email of the created Service Account.
SubsystemName	String	No	The subsystem name for the integration, if not provided then google workspace application name will be used