Cloud custodian GCP policy medium blog

logging-enabled.yml

policies:
  - name: check-all-bucket-logging
    description: |
      Check all bucket logging enabled
    resource: gcp.bucket
    filters:
        - type: value
          key: logging
          value: absent
    actions:
    - type: webhook
      url: <URL>
      body: |-
        {
          "attachments": [
            {
              "fallback": `CloudCustodian Policy Violation`,
              "title": policy.description,
              "color": `danger`,
              "fields": [
                {
                  "title": `Priority`,
                  "value": `High`,
                  "short": `true`
                },
                {
                  "title": `Bucket Rule Name`,
                  "value": resource.name,
                  "short": `true`
                },
                {
                  "title": `Bucket selfLink`,
                  "value": resource.selfLink,
                  "short": `false`
                }
              ],
              "footer": `Powered By M`
            }
          ]
        }