Automated lifecycle management of analytics assets

[jldupont_sora]

Hi,

I would like to enforce immutability on assets that have been declared as "production ready".

E.g. once a team member finishes work on a BigQuery dataset (tables, routines), said team would signal in some way that said dataset is "ready for production" and some automated process would kick off and remove mutation related permissions to all team members on said dataset.

Is there something "out-of-box" in GCP that would do this ?  I was about to start coding stuff around Audit Logs (e.g. looking at some labels) and Cloud Run to automate this sort of process.

Thanks !

[caryna]

Hi @jldupont_sora,

Welcome to Google Cloud Community!

Currently, there is no direct way to automate the access control for immutability of data assets in BigQuery.

However, you may check this Medium article which explains several services on Google Cloud Platform that you can use to automate roles assignments in GCP. 

Alternatively, you can submit a feature request regarding this. While I can’t provide a timeline for when this will be implemented, I recommend keeping an eye on the tracker and checking the release notes and documents for the latest updates.

I hope the above information is helpful.