Chapter 13. Integrating with Google Cloud Security Command Center

Procedure

1. Follow the Adding vulnerability and threat sources to Cloud Security Command Center guide and add Red Hat Advanced Cluster Security for Kubernetes as a trusted Cloud SCC source. Make a note of the Source ID that Google Cloud creates for your Red Hat Advanced Cluster Security for Kubernetes integration. If you do not see a source ID after registering, you can find it on the Cloud SCC Security Sources page.
2. Create a key for the service account you created, or the existing account you used, in the previous step. See Google Cloud’s guide to creating and managing service account keys for details.

Procedure

1. In the RHACS portal, go to Platform Configuration Integrations.
2. Scroll down to the Notifier Integrations section and select Google Cloud SCC.
3. Click New Integration (add icon).
4. Enter a name for Integration Name.
5. Enter the Cloud SCC Source ID.
6. When using a workload identity, check Use workload identity. Otherwise, enter the contents of your service account key file into the Service account key (JSON) field.
7. Select Create to generate the configuration.

Procedure

1. In the RHACS portal, go to Platform Configuration Policy Management.
2. Select one or more policies for which you want to send alerts.
3. Under Bulk actions, select Enable notification.

4. In the Enable notification window, select the Google Cloud SCC notifier.

   Note

   If you have not configured any other integrations, the system displays a message that no notifiers are configured.

5. Click Enable.