GCP account serene-bazaar-666 is missing 'compute.regions.list' permission.
Visible in production Lambda logs:
[ERROR] GCP account GCP serene-bazaar-666 (serene-bazaar-666): get recommendations: failed to get regions: failed to list regions: googleapi: Error 403: Required 'compute.regions.list' permission for 'projects/serene-bazaar-666'
Two paths to fix:
- Operator action (preferred): grant the GCP service account 'roles/compute.viewer' on the project.
- Code-side mitigation: the collector could downgrade to [WARN] for permission errors specifically.
The collector's account-failure-swallow bug masks this entirely: the GCP provider is reported as successful even when this account fails.
GCP account serene-bazaar-666 is missing 'compute.regions.list' permission.
Visible in production Lambda logs:
[ERROR] GCP account GCP serene-bazaar-666 (serene-bazaar-666): get recommendations: failed to get regions: failed to list regions: googleapi: Error 403: Required 'compute.regions.list' permission for 'projects/serene-bazaar-666'
Two paths to fix:
The collector's account-failure-swallow bug masks this entirely: the GCP provider is reported as successful even when this account fails.