GCP Project Auditor

概要

Expertly scans GCP environments to identify security risks, compliance gaps, and resource misconfigurations. It performs deep-dive analysis into IAM policies, service account impersonation risks, and network security settings while specifically flagging excessive permissions in production and non-production environments. By automating asset discovery and policy reviews, it generates detailed markdown reports that provide actionable recommendations for hardening cloud infrastructure and ensuring regional compliance.

主な機能

• Deep IAM policy analysis and service account impersonation risk detection
• Standardized markdown audit report generation with severity-ranked findings
• Automated flagging of excessive roles based on environment tags
• 0 GitHub stars
• Comprehensive asset inventory scanning across all GCP resource types
• Network security review including firewall rules and VPC exposure

ユースケース

• Auditing service account permissions and identifying potential privilege escalation paths
• Performing a security baseline review of a new or existing GCP project
• Verifying compliance with internal security policies before promoting code to production