On this page

Get Involved

Send an Alert to Email

In this guide you'll learn how to enable Guardrails notifications and configure the notification rules to send email notifications. Similar configuration options exist to send notifications to Slack or Teams channels, and to generic webhooks. Our launch week announcement blog post includes a demo of notifications in action.

This is the eighth guide in the Getting started with GCP series.

Prerequisites:

Completion of the previous guides in this series.
Access to the Guardrails console with administrative privileges.

Step 1: Create policy setting

To enable notifications for your workspace, select Policies in the top navigation bar, and then search for turbot notifications. Select the Turbot > Notifications policy type.

Select the New Policy Setting button.

Step 2: Choose level

Select the Turbot root node as the resource.

Note
Notifications polices may only be created at the root level (aka Turbot level) of the resource hierarchy.

Step 3: Choose setting

Choose the Enabled setting. Then select Create.

Step 4: List notifications policies

Navigate back to the list of Notification policies by clicking on the word Notifications in the Turbot > Notifications breadcrumb.

Step 5: Select Rules policy

Select the Rule-Based Routing policy type from the list of policies.

Step 6: View the policy

Select New Policy Setting.

Step 7: Create notification rule

Again choose Turbot as the Resource. Copy and paste this rule, using one or more email addresses you want to notify.

- rules: NOTIFY $.control.state:alarm $.control.state:alarm $.controlType.uri:'tmod:@turbot/gcp-storage#/control/types/bucketAccessControl'
  emails:
    - you@yourcompany.com

The rule will send an alert to the configured email address when any control enters the Alarm state for bucket access control.

Select Create.

Step 8: Find the bucket skipped by your calculated policy

At the end of Create a calculated exception, your test bucket – the one you tagged with environment:development – was in a Skipped state for access control. To verify, revisit Controls by State, choose the Type as GCP > Storage > Bucket > Access Control, and search for the bucket.

Step 9: Trigger the notification

Now, in the GCP console, change the label environment:development to environment:production. The calculated policy setting, which had evaluated to Skip, now evaluates to Check: Uniform. And because you left the bucket’s access control in the fine-grained state, the bucket’s control for access control now transitions to Alarm.

Step 10: Check your email

The alarm reported in the Guardrails console also appears in your inbox. You can alternatively configure Guardrails to send alerts to Slack or MS Teams.

Step 11: Review

In this guide you configured a simple notification rule and triggered a notification event.

Next Steps

In the next guide you’ll learn how to configure for Quick Actions so you can, for example, directly enable uniform access on a bucket that’s now in the Alarm state and make it green.