I created a VM in GCP with a 2 core 8GB Ram config, later i noticed it was changed to 4 core and 16 GB Ram. I need to find out who did this and when from my team.
I tried going through the activity dashboard but its quiet difficult to understand from that. Can anyone provide a solution to this?
Changes to a Compute Engine configuration will be logged in the Admin Activity audit logs. The IAM identity that changed the instance will be logged.
The following CLI command will read the log. Replace PROJECT_ID with your Project ID.
gcloud logging read "logName : projects/PROJECT_ID/logs/cloudaudit.googleapis.com" --project=PROJECT_ID
