![Hyperproof.Io [Test] Help Center](https://downloads.intercomcdn.com/i/o/xgk1dxp2/757668/427b255f2659cc7e0853d6a00ec1/628914ae2617199b7d999ba797a5305a.png)
📝 Note
Hyperproof connects to many third-party systems that frequently change, including the system interface. Contact your System Administrator or the third-party provider for assistance in meeting the requirements to integrate with Hyperproof and collect the proof you need.
The Google Cloud Platform Hypersync can be used to collect data from a single project or all projects within an organization or resource folder.
The process of syncing data from multiple projects is fairly similar to the process for syncing data from a single project. The main difference is that there are additional permissions needed to find other resource types for which to collect data. Setting up your this way allows you to select an organization or folder in the resource hierarchy to sync data from all projects that are immediate descendants of that resource.
Creating a Hyperproof service account
Click to view instructions
Open any GCP project.
From the left menu, select IAM & Admin and then select Service Accounts.
Use the resource selector to target the organization or folder containing the projects you want to get data for. The projects must be a direct descendant of the folder or organization. We suggest creating the role at the organization level, so the role can be assigned to the service account on any resource later on.
Click Create Service Account.
The Create service account page opens.
Enter a name for the service account and, optionally, a description. We suggest using the name Hyperproof Service Account.
Click Done.
Generating JSON credentials
Click to view instructions
Select the service account you just created.
Click Keys.
Click Add Key and the select Create new key.
The Create private key for… window opens.
Select the JSON radio button and click Create.
Save the JSON file in a secure location. Click Close.
Creating an IAM role for the service account
Click to view instructions
From within your GCP organization, select IAM & Admin from the left menu.
Select Roles.
Use the resource selector to target the organization or folder containing the projects you want to get data for. The projects must be a direct descendant of the folder or organization. We suggest creating the role at the organization level, so the role can be assigned to the service account on any resource later on.
Click Create Role.
Enter a name for the role and, optionally, a description. We suggest using the name Hypersync Org Role.
Click Add Permissions and assign the role the following permissions:
|
|
Click Create.
Adding the role to the service account
Click to view instructions
From within your GCP organization, select IAM & Admin from the left menu.
Select IAM.
Use the resource selector to target the organization or folder containing the projects you want to get data for. The projects must be a direct descendant of the folder or organization.
Click Add.
Enter the email address associated with the service account.
💡 Tip
The email address should populate once you begin typing.
From the Select a role drop-down menu, select the role you created in the previous section.
Click Save.
Turning on APIs
Click to view instructions
Search for the following APIs in the project the service account was created in and turn them on:
Identity and Access Management (IAM) APICloud Resource Manager API
Turn on the following APIs for each project you want to retrieve data from. For example, if you select a folder to retrieve data from, you need to turn on these APIs in every project that is an immediate descendant of that folder.
Compute Engine APICloud Storage API