3.3 KiB
Scheduled Cloud Asset Inventory Export to Bigquery
This example shows how to leverage Cloud Asset Inventory Exporting to Bigquery feature to keep track of your project wide assets over time storing information in Bigquery.
The data stored in Bigquery can then be used for different purposes:
- dashboarding
- analysis
The example uses export resources at the project level for ease of testing, in actual use a few changes are needed to operate at the resource hierarchy level:
- the export should be set at the folder or organization level
- the
roles/cloudasset.viewer
on the service account should be set at the folder or organization level
The resources created in this example are shown in the high level diagram below:
![](/zecfoundation/cloud-foundation-fabric/media/commit/1da5bde47b5364b383e05153ab1ced95b3c291c6/cloud-operations/scheduled-asset-inventory-export-bq/diagram.png)
Prerequisites
Ensure that you grant your account one of the following roles on your project, folder, or organization:
- Cloud Asset Viewer role (
roles/cloudasset.viewer
) - Owner primitive role (
roles/owner
)
Running the example
Clone this repository, specify your variables in a terraform.tvars
and then go through the following steps to create resources:
terraform init
terraform apply
Once done testing, you can clean up resources by running terraform destroy
. To persist state, check out the backend.tf.sample
file.
Testing the example
Once resources are created, you can run queries on the data you exported on Bigquery. Here you can find some example of queries you can run.
You can also create a dashboard connecting Datalab or any other BI tools of your choice to your Bigquery datase.
Variables
name | description | type | required | default |
---|---|---|---|---|
cai_config | Cloud Asset inventory export config. | object({...}) |
✓ | |
project_id | Project id that references existing project. | string |
✓ | |
billing_account | Billing account id used as default for new projects. | string |
null |
|
bundle_path | Path used to write the intermediate Cloud Function code bundle. | string |
./bundle.zip |
|
location | Appe Engine location used in the example. | string |
europe-west |
|
name | Arbitrary string used to name created resources. | string |
asset-inventory |
|
project_create | Create project instead ofusing an existing one. | bool |
true |
|
region | Compute region used in the example. | string |
europe-west1 |
|
root_node | The resource name of the parent folder or organization for project creation, in 'folders/folder_id' or 'organizations/org_id' format. | string |
null |
Outputs
name | description | sensitive |
---|---|---|
bq-dataset | Bigquery instance details. | |
cloud-function | Cloud Function instance details. |