📝 Note

Hyperproof connects to many third-party systems that frequently change, including the system interface. Contact your System Administrator or the third-party provider for assistance in meeting the requirements to integrate with Hyperproof and collect the proof you need.

The Google Cloud Platform Hypersync can be used to collect data from a single project or all projects within an organization or resource folder. Collecting data from GCP requires cross-project authentication. To sync data from multiple projects see Syncing data from multiple Google Cloud Platform projects.

There are five steps you need to complete to sync data from a single project.

Creating a Hyperproof service account

Click to view instructions

Open the GCP project from which you want to retrieve data.
From the left menu, select IAM & Admin and then select Service Accounts.
Click Create Service Account.
The Create service account page opens.
Enter a name for the service account and, optionally, a description. We suggest using the name Hyperproof Service Account.
Click Done.

Generating JSON credentials

Click to view instructions

Select the service account you just created.
Click Keys.
Click Add Key and the select Create new key.
The Create private key for… window opens.
Select the JSON radio button and click Create.
Save the JSON file in a secure location. Click Close.

Creating an IAM role for the service account

Click to view instructions

From the left menu, select Roles.
Click Create Role.
Enter a name for the role and, optionally, a description. We suggest using the nameHypersync Role.
Click Add Permissions and assign the role the following permissions:

cloudsql.backupRuns.list
cloudsql.instances.list
compute.firewalls.list
compute.images.list
compute.instances.list
compute.instanceGroupManagers.list
compute.instanceTemplates.list
compute.instances.list
compute.regions.list
compute.snapshots.list
compute.sslPolicies.list

compute.zones.list
container.clusters.get
container.clusters.list
container.deployments.list
container.podSecurityPolicies.list
iam.roles.list
resourcemanager.folders.getIamPolicy
resourcemanager.organizations.getIamPolicy
resourcemanager.projects.getIamPolicy
storage.buckets.get
storage.buckets.list

Click Create.

Adding the role to the service account

Click to view instructions

From the left menu, select IAM.
Click Add.
Enter the email address associated with the service account.

💡 Tip
The email address should populate once you begin typing.
From the Select a role drop-down menu, select the role you created in the previous section.
Click Save.