Cloud Security - GCP

Overview

Manage Google Cloud Platform (GCP) account registration, configuration, and monitoring for CrowdStrike Falcon Cloud Security (CSPM). These cmdlets enable you to connect GCP projects, configure service accounts, and monitor security posture across your GCP infrastructure.

Prerequisites

CSPM registration: Read - Required for retrieval operations
CSPM registration: Write - Required for account provisioning and modifications

Get-FalconCloudGcpAccount

Search for registered Falcon Cloud Security GCP accounts.

Get-FalconCloudGcpAccount

Get-FalconCloudGcpAccount [-Id <string[]>] [-ParentType <string>] [-ScanType <string>] [-Status <string>] [-Sort <string>] [-Limit <int32>] [-Offset <int32>] [-All] [-Total]

Parameters

string[]

GCP resource identifier

string

GCP hierarchy parent type. Valid values: Folder, Organization, Project

string

Scan type. Valid values: dry, full

string

Account status. Valid values: operational, provisioned

string

Property and direction to sort results

int32

Maximum number of results per request (default: 100)

int32

Position to begin retrieving results

switch

Repeat requests until all available results are retrieved

switch

Display total result count instead of results

Example

# Get all GCP accounts
Get-FalconCloudGcpAccount -All

# Get operational projects
Get-FalconCloudGcpAccount -ParentType Project -Status operational

# Get accounts by organization
Get-FalconCloudGcpAccount -ParentType Organization

New-FalconCloudGcpAccount

Create a Falcon Cloud Security GCP account.

New-FalconCloudGcpAccount

New-FalconCloudGcpAccount [-ParentId <string>] [-ParentType <string>] [-ServiceAccountId <int32>] [-ServiceAccountCondition <hashtable[]>] [-ProjectId <string>] [-ClientId <string>] [-ClientEmail <string>] [-PrivateKeyId <string>] [-PrivateKey <string>]

Parameters

string

Parent identifier

string

Parent type

int32

Service account identifier

hashtable[]

Service account conditions

string

Project identifier

string

Client identifier

string

Client email

string

Private key identifier

string

Private key

Example

# Create GCP account with service account credentials
New-FalconCloudGcpAccount -ProjectId my-gcp-project -ClientId 123456789 -ClientEmail service@project.iam.gserviceaccount.com -PrivateKeyId abc123 -PrivateKey '-----BEGIN PRIVATE KEY-----...'

Edit-FalconCloudGcpAccount

Modify an existing Falcon Cloud Security GCP account.

Edit-FalconCloudGcpAccount

Edit-FalconCloudGcpAccount [-ParentId <string>] [-Environment <string>] [-ServiceAccount <object>]

Parameters

string

GCP parent identifier

string

GCP environment

object

GCP service account object

Example

# Update GCP account environment
Edit-FalconCloudGcpAccount -ParentId my-parent-id -Environment production

Remove-FalconCloudGcpAccount

Remove Falcon Cloud Security GCP accounts.

Remove-FalconCloudGcpAccount

Remove-FalconCloudGcpAccount -Id <string[]>

Parameters

string[]

required

GCP resource identifier

Example

# Remove GCP account
Remove-FalconCloudGcpAccount -Id my-gcp-project-id

Get-FalconCloudGcpServiceAccount

Retrieve service account and email information for a Falcon Cloud Security GCP service account.

Get-FalconCloudGcpServiceAccount

Get-FalconCloudGcpServiceAccount -Id <string>

Parameters

string

required

GCP service account identifier

Example

# Get service account details
Get-FalconCloudGcpServiceAccount -Id my-service-account-id

Edit-FalconCloudGcpServiceAccount

Modify a Falcon Cloud Security GCP service account.

Edit-FalconCloudGcpServiceAccount

Edit-FalconCloudGcpServiceAccount -ServiceAccountId <int32> -ServiceAccountCondition <hashtable[]> -ProjectId <string> -ClientId <string> -ClientEmail <string> -PrivateKeyId <string> -PrivateKey <string>

Parameters

int32

required

Service account identifier

hashtable[]

required

Service account conditions

string

required

Project identifier

string

required

Client identifier

string

required

Client email

string

required

Private key identifier

string

required

Private key

Example

# Update service account
Edit-FalconCloudGcpServiceAccount -ServiceAccountId 12345 -ProjectId my-project -ClientId 123456789 -ClientEmail service@project.iam.gserviceaccount.com -PrivateKeyId abc123 -PrivateKey '-----BEGIN PRIVATE KEY-----...'

Test-FalconCloudGcpServiceAccount

Validate the credentials for a Falcon Cloud Security GCP service account.

Test-FalconCloudGcpServiceAccount

Test-FalconCloudGcpServiceAccount -ServiceAccountId <int32> -ServiceAccountCondition <hashtable[]> -ProjectId <string> -ClientId <string> -ClientEmail <string> -PrivateKeyId <string> -PrivateKey <string>

Parameters

int32

required

Service account identifier

hashtable[]

required

Service account conditions

string

required

Project identifier

string

required

Client identifier

string

required

Client email

string

required

Private key identifier

string

required

Private key

Example

# Validate service account credentials
Test-FalconCloudGcpServiceAccount -ServiceAccountId 12345 -ProjectId my-project -ClientId 123456789 -ClientEmail service@project.iam.gserviceaccount.com -PrivateKeyId abc123 -PrivateKey '-----BEGIN PRIVATE KEY-----...'

Invoke-FalconCloudGcpHealthCheck

Perform a synchronous health check for a Falcon Cloud Security GCP parent account.

Invoke-FalconCloudGcpHealthCheck

Invoke-FalconCloudGcpHealthCheck [-ParentId <string>]

Parameters

string

GCP parent account identifier

Example

# Run health check
Invoke-FalconCloudGcpHealthCheck -ParentId my-parent-id

Receive-FalconCloudGcpScript

Download a Bash script which grants Falcon Cloud Security access using Google Cloud Shell.

Receive-FalconCloudGcpScript

Receive-FalconCloudGcpScript [-Id <string[]>] [-ParentType <string>] -Path <string> [-Force]

Parameters

string[]

GCP resource identifier

string

GCP hierarchy parent type. Valid values: Folder, Organization, Project

string

required

Destination path for the script (.sh extension)

switch

Overwrite existing file when present

Example

# Download GCP registration script
Receive-FalconCloudGcpScript -Path ./gcp-register.sh -ParentType Project -Id my-project-id

# Download for organization
Receive-FalconCloudGcpScript -Path ./gcp-org.sh -ParentType Organization

​Overview

​Prerequisites

​Get-FalconCloudGcpAccount

​Parameters

​Example

​New-FalconCloudGcpAccount

​Parameters

​Example

​Edit-FalconCloudGcpAccount

​Parameters

​Example

​Remove-FalconCloudGcpAccount

​Parameters

​Example

​Get-FalconCloudGcpServiceAccount

​Parameters

​Example

​Edit-FalconCloudGcpServiceAccount

​Parameters

​Example

​Test-FalconCloudGcpServiceAccount

​Parameters

​Example

​Invoke-FalconCloudGcpHealthCheck

​Parameters

​Example

​Receive-FalconCloudGcpScript

​Parameters

​Example

​Related Resources

Overview

Prerequisites

Get-FalconCloudGcpAccount

Parameters

Example

New-FalconCloudGcpAccount

Parameters

Example

Edit-FalconCloudGcpAccount

Parameters

Example

Remove-FalconCloudGcpAccount

Parameters

Example

Get-FalconCloudGcpServiceAccount

Parameters

Example

Edit-FalconCloudGcpServiceAccount

Parameters

Example

Test-FalconCloudGcpServiceAccount

Parameters

Example

Invoke-FalconCloudGcpHealthCheck

Parameters

Example

Receive-FalconCloudGcpScript

Parameters

Example

Related Resources