bucket-virus-scanner

This project is a serverless process using GCP Cloud Functions that scan files uploaded to a GCP bucket for viruses using VirusTotal. The scanning process will be triggered when a new file is uploaded to the specified GCP bucket and the dangerous files are deleted.

Prerequisites

GCP Account and Project
GCP Cloud Storage Bucket
GCP Cloud Functions API enabled
GCP Service Account with "Service Account User", "Secrets Manager Admin", "Storage Admin" and "Cloud Functions Admin" IAM roles
VirusTotal API Key stored in GCP Secret Manager
Optional - Terraform installed

Implementation

Implement a GCP Cloud Function that triggers on a new file upload to the specified GCP bucket (google.cloud.storage.object.v1.finalized)
Fetch the VirusTotal API Key securely from GCP Secret Manager within the Cloud Function as an Environment variable

Clone this git repository

git clone https://github.com/Raz-Dahan/bucket-virus-scanner.git
cd ./bucket-virus-scanner

Change relevant variables in main.tf
Deploy on GCP using Terraform
```
cd ./terraform
terraform init
terraform plan
```
And, if suitable for your requirements, proceed to
```
terraform apply
```

Raz-Dahan/bucket-virus-scanner

bucket-virus-scanner

Prerequisites

Implementation

Resources