> ## Documentation Index
> Fetch the complete documentation index at: https://cloudanix.com/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Contacts configured for organization remediation

### Triage and Remediation

<Tabs>
  <Tab title="Remediation">
    ### Remediation

    <AccordionGroup>
      <Accordion title="Using Console" defaultOpen="true">
        To remediate the misconfiguration "Ensure Essential Contacts Configured For Organization" for GCP using GCP console, follow the steps given below:

        1. Login to GCP console using your credentials.
        2. Go to the Navigation menu and select "IAM & Admin".
        3. Click on "Settings" from the left-hand side menu.
        4. Scroll down to the "Essential Contacts" section and click on "Configure".
        5. Click on "Add contact" and enter the email address of the contact person.
        6. Select the contact type from the dropdown menu.
        7. Click on "Add" to save the contact details.
        8. Repeat steps 5 to 7 to add more contacts if required.
        9. Once you have added all the essential contacts, click on "Save" to save the changes.

        By following these steps, you have successfully remediated the misconfiguration "Ensure Essential Contacts Configured For Organization" for GCP using GCP console.

        #
      </Accordion>

      <Accordion title="Using CLI">
        To remediate the misconfiguration "Ensure Essential Contacts Configured For Organization" for GCP using GCP CLI, you can follow the below steps:

        1. Open the GCP Cloud Shell by clicking on the Activate Cloud Shell button on the top of the GCP Console.

        2. Run the following command to list all the organizations in your GCP account:

           ```
           gcloud organizations list
           ```

        3. Note down the organization ID of the organization for which you want to ensure essential contacts are configured.

        4. Run the following command to ensure essential contacts are configured for the organization:

           ```
           gcloud alpha organizations update <ORGANIZATION_ID> --essential-contact-emails=<EMAIL_ADDRESS>
           ```

           Replace `<ORGANIZATION_ID>` with the organization ID you noted down in step 3 and `<EMAIL_ADDRESS>` with the email address of the essential contact(s) you want to configure.

           Note: You can configure multiple email addresses separated by commas.

        5. Verify that the essential contact(s) have been configured for the organization by running the following command:

           ```
           gcloud alpha organizations describe <ORGANIZATION_ID> --format="value(essentialContacts)"
           ```

           This command will output the email address(es) of the essential contact(s) configured for the organization.

        By following the above steps, you can remediate the misconfiguration "Ensure Essential Contacts Configured For Organization" for GCP using GCP CLI.
      </Accordion>

      <Accordion title="Using Python">
        To remediate the "Ensure Essential Contacts Configured For Organization" misconfiguration for GCP using Python, you can follow these steps:

        1. Import the necessary libraries:

        ```python theme={null}
        from google.oauth2 import service_account
        from googleapiclient.discovery import build
        ```

        2. Set up authentication using a service account:

        ```python theme={null}
        credentials = service_account.Credentials.from_service_account_file('path/to/service_account.json')
        ```

        3. Create a client object for the Organizations API:

        ```python theme={null}
        org_client = build('cloudresourcemanager', 'v1', credentials=credentials)
        ```

        4. Get the current organization:

        ```python theme={null}
        org = org_client.organizations().get(name='organizations/your_org_id').execute()
        ```

        5. Check if essential contacts are configured:

        ```python theme={null}
        if 'notificationSettings' in org and 'pubsubTopic' in org['notificationSettings']:
            print('Essential contacts are configured.')
        else:
            print('Essential contacts are not configured.')
        ```

        6. If essential contacts are not configured, configure them:

        ```python theme={null}
        topic_name = 'your_pubsub_topic_name'

        notification_settings = {
            'pubsubTopic': f'projects/{project_id}/topics/{topic_name}',
            'cloudAuditLogsEnabled': True,
            'projectDeletionPolicy': 'ABANDON',
            'folderDeletionPolicy': 'ABANDON'
        }

        org_client.organizations().updateNotificationSettings(name=f'organizations/{org_id}', body=notification_settings).execute()

        print('Essential contacts have been configured.')
        ```

        Note: Replace `your_org_id`, `project_id`, `topic_name`, and `org_id` with the appropriate values for your organization. Also, make sure the service account has the necessary permissions to update organization settings.
      </Accordion>

      <Accordion title="Using Terraform">
        ```hcl theme={null}
        resource "google_essential_contacts_contact" "org_security_contact" {
          # Replace with your organization ID, e.g. "organizations/123456789012"
          parent = "organizations/ORG_ID"

          # Replace with the email address that should receive these notifications
          email = "SECURITY_CONTACT_EMAIL@example.com"

          language_tag = "en-US"

          # Choose the notification categories this contact should receive
          notification_category_subscriptions = [
            "SECURITY",
            "TECHNICAL",
            "LEGAL",
            "BILLING",
            # Add/remove categories as required by your policy:
            # "SUSPENSION",
            # "PRODUCT_UPDATES",
          ]
        }
        ```

        This does not force replacement of existing organization resources; it only creates/updates an Essential Contacts entry attached to the organization.

        For verification, `terraform plan` should show one or more `google_essential_contacts_contact` resources to be created (or updated) with `parent = "organizations/ORG_ID"` and the expected `notification_category_subscriptions`.
      </Accordion>
    </AccordionGroup>
  </Tab>
</Tabs>