Findings by source

Gemini for Google Cloud

Google Cloud · organizations/123456789012 Google · Assistant · audit serviceName cloudaicompanion.googleapis.com

Policy · none set
Policy changes re-score this app on the next sync, which starts right away.
Finding · Open
Risk score
39
Medium
People
3
Principals in Cloud Audit Logs
Audit entries
30
30 invocations · 0 denied · 30 days
First seen
Aug 30, 2026
Last seen 13 h ago
gcpinvocations
Next steps

Recommended actions

  1. 01Gemini for Google Cloud is in use. Review its admin settings for prompt and code data sharing, and whether Code Assist is licensed for everyone using it.
Google Cloud (demo) · organizations/123456789012

In Google Cloud

2026-08-16: 02026-08-17: 02026-08-18: 02026-08-19: 02026-08-20: 02026-08-21: 02026-08-22: 02026-08-23: 02026-08-24: 02026-08-25: 02026-08-26: 02026-08-27: 02026-08-28: 02026-08-29: 02026-08-30: 12026-08-31: 12026-09-01: 12026-09-02: 12026-09-03: 12026-09-04: 12026-09-05: 22026-09-06: 22026-09-07: 32026-09-08: 32026-09-09: 32026-09-10: 32026-09-11: 32026-09-12: 32026-09-13: 22026-09-14: 0
08-1609-14
data access logs on30 invocations
Principals
PrincipalTypeEntriesDenied
[email protected]user150
[email protected]user90
[email protected]user60
Top methods
CodeAssist.CompleteCode24
CloudAssist.Chat6
Projects
contoso-app-dev30 entries
Resources

No resources of this kind in the scope.

Who

People

Identifiers come from device telemetry and proxy logs, so they may be account names rather than full directory entries.

PersonDepartmentSourceSign-ins · 30 dGranted
n/aGoogle Cloud principal0No direct grant
n/aGoogle Cloud principal0No direct grant
n/aGoogle Cloud principal0No direct grant
Why

Evidence

  1. audit_activity · Sep 13, 2026
    Google Cloud (demo): Gemini for Google Cloud, 30 audit entries by 3 principals, 30 invocations, API enabled in 1 project in 30 days across 1 project
    Detail
    {
      "scopes": [
        "organizations/123456789012"
      ],
      "services": [
        "cloudaicompanion.googleapis.com"
      ],
      "topMethods": [
        {
          "name": "CodeAssist.CompleteCode",
          "count": 24
        },
        {
          "name": "CloudAssist.Chat",
          "count": 6
        }
      ],
      "dataAccessLogging": true
    }
  2. api_enabled
    cloudaicompanion.googleapis.com enabled in contoso-app-dev
    Detail
    {
      "project": "contoso-app-dev"
    }