Auto-apply-gcp-iam-recommendations Alternatives
Similar projects and alternatives to auto-apply-gcp-iam-recommendations
-
PopRuby
PopRuby: Clothing and Accessories for Ruby Developers. Fashion meets Ruby! Shop our fun Ruby-inspired apparel and accessories designed to celebrate the joy and diversity of the Ruby community.
auto-apply-gcp-iam-recommendations reviews and mentions
-
IAM Is the Worst
GCP handles #1 with their recommended actions on IAM roles. Good luck doing this manually. GCP will give adivce on each IAM role, which person hasn't used their access in 3 months and encourage you to take action (remove it).
Instead I just remove it automatically. https://github.com/james-ransom/auto-apply-gcp-iam-recommend...
-
Irish health service hit by cyber attack
I would like to also add: A system to lower privileges based on last use.
Companies often have IAM/ssh/keys all over the place. If you centralize things to IAM you can lower permissions based on their last use. EG. A frontend dev needs access to GCP to configure things in firebase. This frontend developer hasn't used these IAM permissions in 3 months. This persons IAM permissions should automatically have these permissions removed.
Probably one of the easiest yet most powerful thing to implement in cloud sec ops AND probably never done.
https://cloud.google.com/iam/docs/recommender-managing
Shameless plug: https://github.com/james-ransom/auto-apply-gcp-iam-recommend...
Stats
The primary programming language of auto-apply-gcp-iam-recommendations is Ruby.