Best practice rules for GCP Cloud Logging Ensure that custom IAM role changes are being monitored using alerting policies. Ensure that VPC network firewall rule changes are being monitored using alerting policies. Ensure that SQL instance configuration changes are being monitored using alerting policies.