Resource Type: GCP > Organization

The Organization resource type represents the top-level container for all GCP resources associated with a specific enterprise or institution, enabling centralized management of projects, folders, and policies across the entire cloud environment.

Controls

The primary controls for GCP > Organization are:

It is also targeted by these controls:

GCP > CIS v5.0 > 1 - Identity and Access Management > 1.01 - Organization Resource > 1.01.01 - Ensure Super Admin Email Address Is Not Tied To A Single User
GCP > CIS v5.0 > 1 - Identity and Access Management > 1.01 - Organization Resource > 1.01.02 - Ensure Super Admin Account Is Not Used For Google Cloud Administration
GCP > CIS v5.0 > 1 - Identity and Access Management > 1.01 - Organization Resource > 1.01.03 - Ensure Folders Are Structured By Environment And Sensitivity
GCP > CIS v5.0 > 1 - Identity and Access Management > 1.01 - Organization Resource > 1.01.04 - Ensure Organization Policies Are Configured For Centralized Constraints
GCP > CIS v5.0 > 1 - Identity and Access Management > 1.04 - Ensure that Security Key Enforcement is Enabled for All Admin Accounts
GCP > CIS v5.0 > 1 - Identity and Access Management > 1.17 - Ensure Essential Contacts is Configured for Organization
GCP > CIS v5.0 > 2 - Logging and Monitoring > 2.02 - Ensure Google Workspace/Cloud Identity Data Sharing with Google Cloud is Enabled for Admin Audit Logging
GCP > CIS v5.0 > 2 - Logging and Monitoring > 2.15 - Ensure 'Access Transparency' is 'Enabled'
GCP > Folder > Discovery
GCP > Organization Policy > Discovery
GCP > Organization Policy Constraint > Discovery
GCP > Project > Discovery
GCP > Turbot > Organization Event Poller

Quick Actions

In Your Workspace

Developers

Resource Type URI

tmod:@turbot/gcp#/resource/types/organization

Category URI

tmod:@turbot/turbot#/resource/categories/cloudOrganization

GraphQL

query resource(id: "tmod:@turbot/gcp#/resource/types/organization") { … }

query resourceActivities(filter: "resourceId:'tmod:@turbot/gcp#/resource/types/organization'") { … }

mutation createResource(input: { … })

mutation updateResource(input: { … })

CLI

Get Resource

turbot graphql resource --id "tmod:@turbot/gcp#/resource/types/organization"

Steampipe Query

Get Resource

select * from guardrails_resource where resource_type_uri = 'tmod:@turbot/gcp#/resource/types/organization';

Get Policy Settings (By Resource ID)

select * from guardrails_policy_setting where filter = 'resourceTypeId:"tmod:@turbot/gcp#/resource/types/organization"';

Get Resource Notification

select * from guardrails_notification where resource_type_uri = 'tmod:@turbot/gcp#/resource/types/organization' and notification_type in ('resource_updated', 'resource_created');