Google Cloud Storage
FortiCASB offers an API-based approach, pulling data directly from Google Cloud Storage via RESTful API. Then FortiCASB portal accesses the data collected through API queries with OAuth2.0 authentication. Subsequently, FortiCASB combines these data to monitor and track Google Cloud Storage user activities, conducts DLP Data Analysis for files stored on Google Cloud Storage.
Prerequisites
To use FortiCASB with Google Cloud Platform, you must have a Google Workspace account, Service Account, and the JSON private key associated with the service account. The service account must have "Google Workspace Domain-wide Delegation" enabled and Project Owner/Organization Administrator roles for monitoring.
Steps to Add Google Cloud Account
- Configure Google Workspace Account
- Configure OAuth Consent Screen
- Create Service Account
- Grant Service Account API Access
- Grant Service Account Owner and Organization Administrator Role
- Enable required APIs
- Enable activity and alert monitoring
- Add Google Cloud Storage Account
Your Google Workspace account can be either an existing account or a new account. If you have just created a new account, you must wait for at least 24 hours for the account to take effect before granting it access to FortiCASB. The Google Workspace account which you connect from with FortiCASB must have the Super Admin role.