Google Cloud Function action

Google Cloud functions can be called when an automation stitch is triggered. This example uses the default Any Security Rating Notification trigger in the automation stitch.

To configure a Google Cloud function automation stitch in the GUI:

1. Go to Security Fabric > Automation and click Create New.

2. Enter the stitch name.

3. Configure the trigger:

   1. Click Add Trigger.

   2. Select Any Security Rating Notification.

   3. Click Apply.

4. Configure the Google Cloud Function action:

   1. Click Add Action.

   2. Click Create and select Google Cloud Function.

   3. Enter the following:

      Name	google-echo
      URL	Enter the request API URI
      HTTP header	echo-header : echo-value

   4. Click OK.

   5. Select the action in the list and click Apply.

5. Click OK.

To configure a Google Cloud function automation stitch in the CLI:

1. Create an automation trigger:

   config system automation-trigger
       edit "Any Security Rating Notification"
           set event-type security-rating-summary
           set report-type any			
       next
   end

2. Create an automation action:

   config system automation-action
       edit "google-echo"
           set action-type google-cloud-function
           set uri "us-central1-xxx-xxxxxxx-000-000000.cloudfunctions.net/xxxx-echo"
           config http-headers
               edit 1
                   set key "echo-header"
                   set value "echo-value"
               next
           end
       next
   end

3. Create the automation stitch:

   config system automation-stitch
       edit "auto-google1"
           set trigger "Any Security Rating Notification"
           config actions
               edit 1
                   set action "google-echo"
                   set required enable
               next
           end
       next
   end

When the automation stitch is triggered, the Security Fabric > Automation page shows the stitch trigger time. In Google Cloud, go to Logs to see the function log showing that the configured function was called, executed, and finished: