services / Google Cloud / Cloud Monitoring Metric Descriptors

Defines the type, labels, and units of a metric before any time series exist for it. Required for custom metrics.

monitoring.​metricDescriptors.​delete

Deleting a descriptor deletes its time series and breaks dependent alert policies, silently disabling any autoscaling or availability alerting that depended on it. Metric descriptors are metadata, not data, so this is modeled as destruction:metadata rather than destruction:data.

Risks

1. Denial-of-service (HIGH)
2. Defense destruction (EVASION)
3. Metadata destruction (MEDIUM)

Scope: LOW

This privilege allows access to data that are not meant to be public, but are otherwise not sensitive.

Links