Integrating your cloud infrastructure with Secfix is a pivotal step in your certification journey. To help you navigate this process smoothly, we’ve laid out this manual that guides you through connecting your Google Cloud Platform (GCP) account to Secfix. Let’s get started! 🚀
💡 You will need the following roles assigned in your GCP organization:
Organization Role Administrator
Project Creator
Service Usage Admin
Service Account Key Admin
You can check your role permissions by following the steps in this guide.
💡 If you’ve previously connected GCP, ensure that each Project ID is unique and not already linked to existing GCP connections. Learn more about removing GCP projects from earlier connections.
To begin, head to the Connections page in your Secfix dashboard. In the Cloud Infrastructure Providers section click Connect next to Google Cloud Platform.
Step 1: Specify projects
💡 Include all project IDs that contain your production environment resources. Other resources are typically not in the audit scope. All the projects must be nested under the same organization.
Once logged into GCP:
Find project IDs that you want to connect.
Paste them into Secfix.
💡 Billing must be enabled at least in the first project you're connecting.
Step 2: Create Service Account, Project, and Role
💡 Ensure you can access GCP Cloud Shell to run setup scripts.
Open the Google Cloud Console and activate Cloud Shell.
Once the Cloud Shell is active, click Open Editor.
To download Secfix GCP connection script, run the following command in the Cloud Shell terminal:
wget https://staging.secfix.com/assets/provision/secfix-gcp-connection.sh
To generate credentials, run the following command (replace
<project_id>with the Project IDs you entered earlier):bash ./secfix-gcp-connection.sh <project_id_1> <project_id_2>
Follow the on-screen prompts to authorize access.
Once the script completes, return to Open Editor, and download the service account JSON Key: (
secfix-scanner.json).
Step 3: Upload JSON Key
Upload the
secfix-scanner.jsonfile:Drag and drop the file into the upload area, or
Click Upload and select the file from your local drive.
Once the file is uploaded successfully, click Complete to finalize the integration.
🎉 Congratulations! Your GCP account is now connected to Secfix.
Troubleshooting and Support
If you need additional integration specifications or have problems with connecting, check out our GCP Connection FAQ for detailed troubleshooting tips and answers to common questions.
Still stuck? Write to us on the chat inside the app ✍️