Problem you have encountered:
The CAI export entry for a project's IAM_POLICY does not match what the API returns for auditConfigs.

The exported config (for a specific project of mine) contains the following key, and data:
```
"audit_configs": [
{
"service": "allServices",
"audit_log_configs": [
{
"log_type": 1
},
{
"log_type": 2
},
{
"log_type": 3
}
]
}
]
```

However, the API call output (for the same project) looks like this:

```
"auditConfigs": [
{
"service": "allServices",
"auditLogConfigs": [
{
"logType": "ADMIN_READ"
},
{
"logType": "DATA_WRITE"
},
{
"logType": "DATA_READ"
}
]
}
]

```

The key formats do not mach, and it looks like the log_type values are some ENUM value or something.

What you expected to happen:

The CAI export data should match the data returned from the API calls to get the same information

Steps to reproduce:

Run a CAI export:
gcloud asset export --project=your-project --content-type="iam-policy" --asset-types='cloudresourcemanager.googleapis.com/Project' --output-path=gs://your-bucket/some-path/export_name

Compare the output's to making a call to the cloudresourcemanager API directly or using the API explorer: https://cloud.google.com/resource-manager/reference/rest/v1/projects/getIamPolicy

Issue 146875863

Mentioned issues (1)

Links (4)

Issue metadata