search
HomeDiscordGitHubSponsor
githubEdit

Resource Hierarchy and IAM

Google Cloud resource hierarchy organizes and manages entities hierarchically. Identity and Access Management (IAM) lets administrators authorize who can take action on specific resources.

Corpus creates Google Cloud projects with CIS GCP Benchmarkarrow-up-right compliance controls baked in from day zero. Each project is provisioned via the pt-arche-google-projectarrow-up-right module with the following controls applied automatically:

  • CIS 2.1 — Audit logging enabled for all services

  • CIS 2.2 — KMS-encrypted log sink bucket created

  • CIS 3.1 — Default network deleted on project creation

  • CIS 4.4 — OS Login enforced for compute instances

Projects are named and labeled using outputs from the pt-arche-core-helpersarrow-up-right module, which derives naming conventions from the Logos workspace state. This ensures project names, labels, and folder placements remain consistent across all three environments (sandbox, non-production, production).

circle-info

The Google Cloud resource hierarchyarrow-up-right resembles the file system found in traditional operating systems — it organizes and manages entities hierarchically. Identity and Access Management (IAM)arrow-up-right lets administrators authorize who can take action on specific resources.

Last updated