Control: GCP > Secret Manager > Secret > Labels

Take an action when an GCP Secret Manager secret labels is not updated based on the GCP > Secret Manager > Secret > Labels > * policies.

If the resource is not updated with the labels defined in GCP > Secret Manager > Secret > Labels > Template, this control raises an alarm and takes the defined enforcement action.

See Labels for more information.

Resource Types

This control targets the following resource types:

GCP > Secret Manager > Secret

Policies

The following policies can be used to configure this control:

GCP > Secret Manager > Secret > Labels

This control type relies on these other policies when running actions:

GCP > Secret Manager > Secret > Labels > Template

Permissions

Cloud permissions used by this control and its actions:

secretmanager.secrets.update

In Your Workspace

Developers

Control Type URI

tmod:@turbot/gcp-secretmanager#/control/types/secretLabels

Category URI

tmod:@turbot/turbot#/control/categories/resourceTags

GraphQL

query controlType(id: "tmod:@turbot/gcp-secretmanager#/control/types/secretLabels") { … }

query controls(filter: "controlTypeId:'tmod:@turbot/gcp-secretmanager#/control/types/secretLabels'") { … }

CLI

Get Controls

turbot graphql controls --filter "controlTypeId:tmod:@turbot/gcp-secretmanager#/control/types/secretLabels"