Description

It is recommended that a metric filter and alarm be established for changes to Identity and Access Management (IAM) role creation, deletion and updating activities.

• 

  Recommended Mitigation

  In the User-defined Metrics section, ensure that at least one metric is present with filter text: resource.type=""iam_role"" AND protoPayload.methodName = ""google.iam.admin.v1.CreateRole"" OR protoPayload.methodName=""google.iam.admin.v1.DeleteRole"" OR protoPayload.methodName=""google.iam.admin.v1.UpdateRole""