Cloud Audit Logging with Philip O'Toole and Oscar Guerrero

Google Cloud Platform Podcast

Episode | Podcast

Date: Wed, 01 Jul 2020 00:00:00 +0000

<p>This week, <a href="https://twitter.com/markmirch">Mark Mirchandani</a> and <a href="https://twitter.com/pvergadia">Priyanka Vergadia</a> learn all about Cloud Audit Logging with fellow Googlers Philip O’Toole and Oscar Guerrero. Our guests explain the importance of Cloud Audit Logs to keep track of your GCP resources so you know who, what, where, and when things were done. Our guests explain the types of logs GCP offers and why each is important for security. The interview continues with a discussion the various other benefits of audit logging, including proof of compliance and measuring of risk.</p> <p>Because audit logs have the ability to create more data than some businesses can use, Philip and Oscar help our listeners understand how to choose the correct logging services for their needs, and we learn how Cloud Logging can help users digest their data. Philip describes how audit logs and event driven systems can benefit businesses, explaining how event driven systems can be built and pushed with GCP. Oscar continues the conversation with audit logging in G Suite. The Cloud Logging team is continuing to expand offerings, so be on the lookout!</p> <h5 id="philip-o-toole">Philip O’Toole</h5> <p>Philip O’Toole is an Engineering Manager at Google Pittsburgh, leading development teams working on GCP’s Cloud Logging Platform, including Audit Logging. Prior to Google, he led development teams at InfluxDB, Loggly, and Riverbed Technology. You can find him on the <a href="https://www.philipotoole.com">web</a>.</p> <h5 id="oscar-guerrero">Oscar Guerrero</h5> <p>Oscar Guerrero is a Product Manager at Google New York, focused on Data Privacy and Compliance, in particular Audit Logging. Prior to Google, he consulted on Cloud based Financial Risk systems and was a Program Manager at Microsoft in Commerce, Xbox, and Cloud Recommendations.</p> <h5 id="cool-things-of-the-week">Cool things of the week</h5> <ul> <li>The new Google Cloud region in Jakarta is now open <a href="https://cloud.google.com/blog/products/infrastructure/new-google-cloud-region-in-jakarta-now-open"> blog</a></li> <li>Cloud SQL database instances now discounted <a href="https://cloud.google.com/blog/products/databases/cloud-sql-database-instances-now-discounted"> blog</a> <ul> <li>Beyond Your Bill <a href="https://www.youtube.com/playlist?list=PLIivdWyY5sqKJx6FwJMRcsnFIkkNFtsX9"> videos</a></li> <li>Understanding and analyzing your committed use discounts <a href="https://www.youtube.com/watch?v=xVW1m-uBWAM">video</a></li> </ul> </li> <li>Now available: Next OnAir ‘20 schedule, sessions, learning, and resources <a href="https://cloud.google.com/blog/topics/google-cloud-next/next-onair20-schedule-sessions-learning-and-resources-available"> blog</a></li> </ul> <h5 id="interview">Interview</h5> <ul> <li>Cloud Audit Logs <a href="https://cloud.google.com/audit-logs">site</a></li> <li>Cloud Audit Logs Documentation <a href="https://cloud.google.com/logging/docs/audit">site</a></li> <li>Cloud Logging <a href="https://cloud.google.com/logging">site</a></li> <li>Cloud Logging Documentation <a href="https://cloud.google.com/logging/docs">site</a></li> <li>BigQuery <a href="https://cloud.google.com/bigquery">site</a></li> <li>Google Cloud Storage <a href="https://cloud.google.com/storage">site</a></li> <li>Operations (formerly Stackdriver) <a href="https://cloud.google.com/products/operations">site</a></li> <li>Chronicle <a href="https://chronicle.security/enterprise-security">site</a></li> <li>Splunk <a href="https://www.splunk.com">site</a></li> <li>G Suite audit logging information <a href="https://cloud.google.com/logging/docs/audit/gsuite-audit-logging">guide</a></li> <li>Google G Suite to Splunk HEC Configuration <a href="https://www.splunk.com/en_us/blog/partners/google-gsuite-to-splunk-hec-configuration.html"> blog</a></li> <li>Anthos <a href="https://cloud.google.com/anthos">site</a></li> </ul> <h5 id="tip-of-the-week">Tip of the week</h5> <p>This week, we have a tip from our Customer Engineering friend, Anthony Bushong, about audit logging in Kubernetes. You can find great documentation on this <a href="https://cloud.google.com/kubernetes-engine/docs/how-to/audit-logging"> here</a> and <a href="https://cloud.google.com/logging/docs/logs-based-metrics">here</a>.</p> <h5 id="what-s-something-cool-you-re-working-on">What’s something cool you’re working on?</h5> <p><a href="https://www.youtube.com/watch?v=brhA9uaz7Xs">Cloud Bytes</a> launched on Sunday and the 2nd episode of the <a href="https://www.youtube.com/watch?v=VDBhvexAj8I">Drawing Board</a> launched late last week! Continuing to work on these.</p>