Skip to content

Latest commit

 

History

History
51 lines (30 loc) · 2.91 KB

README.md

File metadata and controls

51 lines (30 loc) · 2.91 KB

CrowdStrike logo

GCP Cloud Storage Bucket Protection

This solution demonstrates different ways to leverage CrowdStrike's QuickScan Pro APIs to protect GCP Cloud Storage buckets. Through these examples, you'll learn how to implement both real-time and on-demand malware scanning for your cloud storage.

Prerequisites

  • Have access to GCP w/ permissions to manage resources
  • Create or modify an API Key in the Falcon Console and Assign the following scopes:
    • QuickScan Pro - READ, WRITE
    • Malquery - READ, WRITE

      Used to pull down sample malicious files for demonstration purposes

Example Implementations

Real-time Storage Protection

This demonstration leverages Terraform to provide a functional example of real-time storage protection in GCP using the QuickScan Pro APIs. All of the necessary resources for using this solution to protect a GCP Cloud Storage bucket are implemented for you as part of the environment configuration process, including sample files and command line helper scripts.

Get Started:

Open in Cloud Shell


Deploying to an Existing Storage

This demonstration leverages Terraform to provide a functional example of adding protection to an existing GCP bucket with the QuickScan Pro APIs. All of the necessary resources for using this solution to protect an existing GCP Cloud Storage bucket are implemented for you as part of the environment configuration process, including sample files and command line helper scripts.

Get Started:

Open in Cloud Shell


On-demand Scanning

This example provides a stand-alone solution for scanning a Cloud Storage bucket before implementing protection. While similar to the serverless function, this solution will only scan the bucket's existing file contents.

This solution leverages the same APIs and logic that is implemented by the serverless handler that provides real-time protection.

To read more about this component, review the documentation located here.

Get Started:

Open in Cloud Shell