domains / families / security / auditing-gcp-iam-permissions

auditing-gcp-iam-permissions

separate

'Auditing Google Cloud Platform IAM permissions to identify overly permissive

When to use

• When performing security assessments of GCP organization or project IAM configurations
• When identifying service accounts with excessive permissions or unused access
• When compliance requirements mandate review of access controls and role assignments
• When investigating potential lateral movement through IAM misconfigurations
• When reducing the blast radius of compromised credentials by scoping down permissions

When not to use

• VPC firewall rule auditing
• GKE RBAC auditing
• real-time threat detection on IAM actions

Skill page

Source