Vendors / Google Cloud Platform / Security Command Center / SCC Error Findings

Event type

SCC Error Findings

Security Command Center configuration errors

SCC Error findings from Google Cloud Security Command Center, identifying problems in the configuration of Security Command Center or one of its services that prevent Security Command Center from detecting security issues.

JSON 7 fields Low Generator

error configuration scanner-error scc gcp

Preview Sample View Schema

CLI Install

meltr templates install google

Overview

What this event covers

SCC Error findings identify problems in the configuration of Security Command Center or one of its services that prevent Security Command Center from detecting security issues in your Google Cloud environment. These errors must be resolved to ensure proper security monitoring.

When generated

›Security scanner fails to access resources due to insufficient permissions
›API authentication fails when attempting to scan resources
›Resource is deleted or moved during scan operation
›Scan operation exceeds time limit
›Organization quota for security scans has been exceeded
›Invalid scanner configuration is detected

Security relevance

High

Compliance

NIST 800-53 (SI-4) ISO 27001 (A.12.4.1) SOC 2 (CC7.2) CIS GCP Foundation 2.0

Frequency notes

SCC Error findings are generated when Security Command Center services encounter configuration or operational issues. Frequency is typically low but can spike during misconfigurations or when service quotas are exceeded. These errors should be resolved promptly to restore security monitoring capabilities.

Resources

Docs and tools

Finding Classes - SCC Error official Overview of Security Command Center Errors official Configuration Error Findings official Remediate Configuration Error Findings official

Generation

Configuration

Base frequency: 2 events/hour
Time patterns: business_hours night_hours weekend
Business hours: 1.0x
Night hours: 1.0x
Weekend: 1.0x

Schema

Field definitions

Field reference for this event type — types, requirements, examples, and allowed values.

name

String Required

Full resource name of the SCC error finding

Source: Constructed with 'error-' prefix

Format organizations/{org_id}/sources/{source_id}/locations/global/findings/error-{finding_id}

Example organizations/123456789/sources/9732761411165682985/locations/global/findings/error-abc123...

category

String Required

SCC error category

Example SCANNER_ERROR

Values

SCANNER_ERROR Security scanner encountered an error
API_ERROR API call failed
CONFIGURATION_ERROR Invalid configuration detected
PERMISSION_ERROR Insufficient permissions for operation
RESOURCE_ERROR Resource access or availability error

sourceProperties.error

Object Required

Error details

Source: Object with errorType, errorCode, errorMessage, affectedService, errorTime, retryCount, and lastRetryTime

sourceProperties.error.errorType

String Required

Type of error encountered

Example SCANNER_FAILURE

Values

SCANNER_FAILURE Security scanner failed to complete scan
API_AUTHENTICATION_FAILURE API authentication failed
RESOURCE_ACCESS_DENIED Access to resource was denied
CONFIGURATION_MISMATCH Configuration mismatch detected
TIMEOUT Operation timed out
QUOTA_EXCEEDED Service quota exceeded

sourceProperties.error.errorCode

String Required

Specific error code

Example ERROR_SCANNER_DISABLED

Values

ERROR_SCANNER_DISABLED Scanner is disabled
ERROR_PERMISSION_DENIED Permission denied
ERROR_RESOURCE_NOT_FOUND Resource not found
ERROR_QUOTA_EXCEEDED Quota exceeded
ERROR_TIMEOUT Operation timeout
ERROR_INVALID_CONFIGURATION Invalid configuration

severity

String Required

SCC error severity level

Source: random_weighted favoring MEDIUM (50%)

Example MEDIUM

Values

CRITICAL Critical error preventing security monitoring
HIGH High severity error
MEDIUM Medium severity error
LOW Low severity error

findingClass

String Required

Finding class identifier

Source: Static 'SCC_ERROR'

Example SCC_ERROR