What problem does it solve?
Managing Google Cloud Logging configuration requires knowing many gcloud commands and understanding which operations are safe, billable, or destructive. This Skill guides an AI agent through configuring single-project Cloud Logging resources while enforcing safety tiers that prevent accidental data loss or unexpected billing.
Core Features & Use Cases
- Log Buckets and Sinks: Create regional log buckets with retention policies and Observability Analytics, then route logs to them with sinks.
- Sensitive Log Access Control: Restrict visibility of sensitive logs using log views, IAM conditions, and the Logs View Accessor role.
- Cost Optimization: Reduce logging costs with sink exclusions and sampling filters for high-volume logs.
- Logs-Based Metrics: Create counter metrics from log filters for alerting on patterns like OutOfMemory errors.
- Use Case: A security team needs to hide Data Access audit logs from general viewers while granting a security group access through a dedicated log view with an IAM condition.
Quick Start
Ask the agent to create a regional log bucket with a one-year retention policy and route specific logs to it in your Google Cloud project.
