Hi, Just checking if there is a history or logs you can check for Quotas/Limit changes? been checking for quite sometime and can’t see one. i need to know what quotas were changed on the project i am currently handling for documentation
It looks like Cloud Logging doesn’t provide any audit logs connected with the update/request on a Cloud IAM resource quota.
However, if you just want to know when they happened, rather than, e.g., who requested them, you should also be able to detect such action with the help of a bump in the quota/limit metrics.
Availability of logs connected with quota update/request seems like a valid feature request with Google Cloud’s operations suite (formerly Stackdriver) Cloud Logging service.
I have created one such feature request by using Google Cloud Platform’s issue-tracker article.
Feel free to provide your suggestions there as a comment. Your comments on this request will be seriously considered during the future improvement of the product and services within the Google Cloud Platform.
1 Like
Hi @jovenxp thanks for your question. Given this related to our recent session on Managing Capacity, Quota, and Stockouts in the Cloud, we addressed the question during the Q&A. You can see the response below, from the Q&A section in our recap post under #4, as well as in the live session replay here (24:30).
"This sounds like auditing quota changes. To my knowledge, there is no way to audit when or who changed a quota using audit logs in Google Cloud.
You can control who has access to change a quota by limiting the IAM permissions a user has by following the Security Best Practices for IAM of “least privilege.” This is the concept of only granting the IAM permissions a person needs and nothing more. This is also referred to as “separation of duties.”
One idea is to compare newly-created Google Cloud project quotas with the original project quotas. Each Google Cloud project gets a default quota set for all services. You could compare quotas side by side that are used in the console with two different internet browsers.
You can also use the Quota Monitoring Solution to export these as a report."
1 Like