services / Google Cloud / Cloud Logging Exclusion
A Cloud Logging Exclusion specifies a set of log entries that are filtered out by a sink.
Exclusion operations apply to the _Default logging sink. An attacker may manipulate exclusions to hide their activity in order to evade detection.
logging.exclusions.create
Risks
Scope: MEDIUM
This privilege may grant access to confidential data, or its exploit can incur operational cost.
Links
Contributed by P0 Security
© 2023–present P0 Security and contributors to the IAM Privilege Catalog