Skip to content

Commit 99af60f

Browse files
Merge pull request #264772 from dcurwin/fix-formatting-jan31-2024
Fix formatting
2 parents 12e0c9a + 0cf09ae commit 99af60f

File tree

1 file changed

+8
-9
lines changed

1 file changed

+8
-9
lines changed

articles/defender-for-cloud/concept-gcp-connector.md

Lines changed: 8 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,6 @@
11
---
22
title: Defender for Cloud's GCP connector
33
description: Learn how the GCP connector works on Microsoft Defender for Cloud.
4-
54
ms.topic: conceptual
65
ms.service: defender-for-cloud
76
ms.date: 06/29/2023
@@ -19,7 +18,7 @@ The GCP connector allows for continuous monitoring of Google Cloud resources for
1918

2019
The authentication process between Microsoft Defender for Cloud and GCP is a federated authentication process.
2120

22-
When you onboard to Defender for Cloud, the GCloud template is used to create the following resources as part of the authentication process:
21+
When you onboard to Defender for Cloud, the GCloud template is used to create the following resources as part of the authentication process:
2322

2423
- Workload identity pool and providers
2524

@@ -61,9 +60,9 @@ From here, you can decide which resources you want to protect based on the secur
6160

6261
### Configure access
6362

64-
Once you've selected the plans, you want to enable and the resources you want to protect you have to configure access between Defender for Cloud and your GCP project.
63+
Once you selected the plans, you want to enable and the resources you want to protect you have to configure access between Defender for Cloud and your GCP project.
6564

66-
:::image type="content" source="media/concept-gcp-connector/configure-access-gcp-connector.png" alt-text="Screenshot of the configure access screen between Defender for Cloud and your GCP project." lightbox="media/concept-gcp-connector/configure-access-gcp-connector.png":::
65+
:::image type="content" source="media/concept-gcp-connector/configure-access-gcp-connector.png" alt-text="Screenshot of the Configure access screen between Defender for Cloud and your GCP project." lightbox="media/concept-gcp-connector/configure-access-gcp-connector.png":::
6766

6867
In this step, you can find the GCloud script that needs to be run on the GCP project that is going to onboarded. The GCloud script is generated based on the plans you selected to onboard.
6968

@@ -106,25 +105,25 @@ From here, you can decide which resources you want to protect based on the secur
106105

107106
### Configure access
108107

109-
Once you've selected the plans, you want to enable and the resources you want to protect you have to configure access between Defender for Cloud and your GCP project.
108+
Once you selected the plans, you want to enable and the resources you want to protect you have to configure access between Defender for Cloud and your GCP project.
110109

111-
:::image type="content" source="media/concept-gcp-connector/configure-access-organization.png" alt-text="Screenshot of the configure access screen between Defender for Cloud and your GCP organization." lightbox="media/concept-gcp-connector/configure-access-organization.png":::
110+
:::image type="content" source="media/concept-gcp-connector/configure-access-organization.png" alt-text="Screenshot of the Configure access screen between Defender for Cloud and your GCP organization." lightbox="media/concept-gcp-connector/configure-access-organization.png":::
112111

113112
When you onboard an organization, there's a section that includes management project details. Similar to other GCP projects, the organization is also considered a project and is utilized by Defender for Cloud to create all of the required resources needed to connect the organization to Defender for Cloud.
114113

115114
In the management project details section, you have the choice of:
116115

117-
- Dedicating a management project for Defender for Cloud to include in the GCloud script.
116+
- Dedicating a management project for Defender for Cloud to include in the GCloud script.
118117
- Provide the details of an already existing project to be used as the management project with Defender for Cloud.
119118

120-
You need to decide what is your best option for your organization's architecture. We recommend creating a dedicated project for Defender for Cloud.
119+
You need to decide what is your best option for your organization's architecture. We recommend creating a dedicated project for Defender for Cloud.
121120

122121
The GCloud script is generated based on the plans you selected to onboard. The script creates all of the required resources on your GCP environment so that Defender for Cloud can operate and provide the following security benefits:
123122

124123
- Workload identity pool
125124
- Workload identity provider for each plan
126125
- Custom role to grant Defender for Cloud access to discover and get the project under the onboarded organization
127-
- A service account for each plan
126+
- A service account for each plan
128127
- A service account for the autoprovisioning service
129128
- Organization level policy bindings for each service account
130129
- API enablement(s) at the management project level.

0 commit comments

Comments
 (0)