Merge pull request Azure#10351 from Azure/users/v-muuppugund/gcp

GCP Audit logs process updates

Solutions/Google Cloud Platform Audit Logs/readme.md

@@ -0,0 +1,51 @@
+# GCP Audit logs configuration
+The following are the steps for GCP Audit logs configuration.
+
+## Configure GCP project.
+There are two things you need to set up in your GCP environment:
+
+Set up Microsoft Sentinel authentication in GCP by creating the following resources in the GCP IAM service:
+
+Workload identity pool
+Workload identity provider
+Service account
+Role
+Set up log collection in GCP and ingestion into Microsoft Sentinel by creating the following resources in the GCP Pub/Sub service:
+
+Topic
+Subscription for the topic
+
+You can set up the environment in one of two ways:
+
+1. Create GCP resources via the Terraform API: Terraform provides APIs for resource creation and for Identity and Access Management (see Prerequisites). Microsoft Sentinel provides Terraform scripts that issue the necessary commands to the APIs.
+
+2. Set up GCP environment manually, creating the resources yourself in the GCP console.
+
+In order to create fresh projects and GCP PUB/Sub service ,subscription,please follow below steps
+
+### GCP Authentication Setup
+
+Please follow terraform script steps mentioned in below link as may miss some steps in GCP while adding manually
+* https://learn.microsoft.com/en-us/azure/sentinel/connect-google-cloud-platform?tabs=terraform%2Cauditlogs#tabpanel_1_terraform
+
+if you don't want to perform above steps please use the below link for manual set up
+
+* https://learn.microsoft.com/en-us/azure/sentinel/connect-google-cloud-platform?tabs=manual%2Cauditlogs#tabpanel_2_manual
+
+### GCP Audit Logs Setup
+
+Please follow terraform script steps mentioned in below link to set up GCP audit logs
+
+* https://learn.microsoft.com/en-us/azure/sentinel/connect-google-cloud-platform?tabs=terraform%2Cauditlogs#tabpanel_2_terraform
+
+
+if you don't want to perform above steps please use the below link for manual set up
+
+* https://learn.microsoft.com/en-us/azure/sentinel/connect-google-cloud-platform?tabs=manual%2Cauditlogs#tabpanel_2_manual
+
+
+# Note
+
+* if want to  use existing project/account details need to modify the above scripts accordingly and run in GCP cloud console.
+
+