Keyless Integration or Securing API keys

InsightIDR Automation
1

Hello guys,

I am wondering how we are able to connect the Google Directory Plugin to Rapid7 in a secure manner.

From my understanding, this is the current method of connecting the Google Directory Plugin to Rapid7 InsightIDR:

Required Configuration Inputs

  • Connection Name

    • A unique, recognizable label for the integration within the Rapid7 platform.

    • Example: Google_Workspace_User_Containment_Prod

  • Service Account Key (JSON File)

    • The raw text or file upload of the Google Cloud private key block.

    • Contains the private key ID, client ID, and authentication URLs.

  • Administrator Email Address

    • The specific Google Workspace email account that the Service Account will impersonate.

    • Security Note: This should be a custom, restricted administrator account with only user suspension privileges, not a global Super Admin.

  • Insight Orchestrator Selection

    • The deployment engine assigned to run the plugin workflows.

    • This determines whether the API calls route through your on-premises network or Rapid7’s secure cloud engine.

Thanks.