GCP Project Auditor

Acerca de

Expertly scans GCP environments to identify security risks, compliance gaps, and resource misconfigurations. It performs deep-dive analysis into IAM policies, service account impersonation risks, and network security settings while specifically flagging excessive permissions in production and non-production environments. By automating asset discovery and policy reviews, it generates detailed markdown reports that provide actionable recommendations for hardening cloud infrastructure and ensuring regional compliance.

Características Principales

• Deep IAM policy analysis and service account impersonation risk detection
• Standardized markdown audit report generation with severity-ranked findings
• Automated flagging of excessive roles based on environment tags
• 0 GitHub stars
• Comprehensive asset inventory scanning across all GCP resource types
• Network security review including firewall rules and VPC exposure

Casos de Uso

• Auditing service account permissions and identifying potential privilege escalation paths
• Performing a security baseline review of a new or existing GCP project
• Verifying compliance with internal security policies before promoting code to production