✨ add encryption to gcp storage bucket resource (#5077)

mondoohq · Jan 9, 2025 · 9de84a0 · 9de84a0
1 parent dbffff1
commit 9de84a0
Show file tree

Hide file tree

Showing 4 changed files with 21 additions and 0 deletions.
diff --git a/providers/gcp/resources/gcp.lr b/providers/gcp/resources/gcp.lr
@@ -934,6 +934,8 @@ private gcp.project.storageService.bucket @defaults("id") {
   iamConfiguration dict
   // Retention policy
   retentionPolicy dict
+  // Encryption
+  encryption dict
 }
 
 // Google Cloud (GCP) SQL resources

diff --git a/providers/gcp/resources/gcp.lr.go b/providers/gcp/resources/gcp.lr.go
diff --git a/providers/gcp/resources/gcp.lr.manifest.yaml b/providers/gcp/resources/gcp.lr.manifest.yaml
@@ -2441,6 +2441,8 @@ resources:
   gcp.project.storageService.bucket:
     fields:
       created: {}
+      encryption:
+        min_mondoo_version: 9.0.0
       iamConfiguration: {}
       iamPolicy: {}
       id: {}

diff --git a/providers/gcp/resources/storage.go b/providers/gcp/resources/storage.go
@@ -100,6 +100,10 @@ func (g *mqlGcpProjectStorageService) buckets() ([]interface{}, error) {
 		if err != nil {
 			return nil, err
 		}
+		enc, err := convert.JsonToDict(bucket.Encryption)
+		if err != nil {
+			return nil, err
+		}
 
 		mqlInstance, err := CreateResource(g.MqlRuntime, "gcp.project.storageService.bucket", map[string]*llx.RawData{
 			"id":               llx.StringData(bucket.Id),
@@ -114,6 +118,7 @@ func (g *mqlGcpProjectStorageService) buckets() ([]interface{}, error) {
 			"updated":          llx.TimeDataPtr(updated),
 			"iamConfiguration": llx.DictData(iamConfigurationDict),
 			"retentionPolicy":  llx.DictData(retentionPolicy),
+			"encryption":       llx.DictData(enc),
 		})
 		if err != nil {
 			return nil, err