Aja Hammerly (@the_thagomizer) demonstrates how to create alerts based on audit log events. Some common uses cases for this type of alert are getting notified when certain resources types are created (such as VMs) or getting notified if resources are altered (like changing fire wall rules).
More information about audit logging is available here: https://cloud.google.com/logging/docs/audit/
More information about log-based metrics in stack driver is available here: https://cloud.google.com/logging/docs/view/logs_based_metrics
A tutorial based on this video is also available: http://www.thagomizer.com/blog/2017/03/23/audit-logging-on-gcp.html
Publisher: Google Cloud
You can watch this video also at the source.