GCP Troubleshooting and Validation
-
Validation Steps After Connection
-
In SailPoint Entro Dashboard, navigate to Management → Accounts & Integrations → GCP.
-
Confirm the status shows Verified.
-
Review Last Sync Timestamp for recent activity.
-
Inspect Findings for discovered secrets or misconfigurations.
-
API Validation Example
Validate accessible GCP projects
curl -H "Authorization: Bearer $(gcloud auth print-access-token)" https://cloudresourcemanager.googleapis.com/v1/projects
Expected: JSON list of accessible projects.
Common Issues
| Issue | Cause | Resolution |
|---|---|---|
| 403 Forbidden | Missing IAM roles | Ensure required roles are granted |
| 401 Unauthorized | Expired Service Account key | Regenerate key |
| Connection failed | Firewall or connector offline | Check Worker Group (Connector) |
| Missing logs | APIs not enabled | Enable logging.googleapis.com |
Security & Compliance Notes
- All operations are read-only
- Data encrypted with AES-256
- Transport secured with TLS 1.2+