Tips for Connecting Vanta to HIPAA Vault for GCP Monitoring with Limited Permissions
Does anyone have any tips for connecting Vanta to HIPAA Vault for GCP monitoring? I'm being told by their support team that I can't use the Vanta process to connect to GCP because: "...the Vanta scanner too invasive with their defaults. As a Google Cloud Partner, our organization supports many client projects. Vanta demands org level permissions by default which we cannot provide because of our sub clients. However, there may be a way to configure this within a single project, but it makes the set up more complex. As a Google Cloud Partner we have the premium version of the Security Command Center (SCC). SCC provides the compliance checks that Vanta provides. However, we understand that Vanta may be a tool used by your org to aggregate information.... Any suggestions/solutions to this dilemma is appreciated.
