Automatically Enforce least privilege with recommendations by GCP.

GCP gives you recommendations on your IAM permissions. Often users have too much privilege based on a 90 day look back window. This script will automatically apply the GCP IAM permissions recommended by google by REMOVING roles no longer needed by the user.

Example of excess privileges and a given recommendation

How to run

First! Setup gcloud for your project. https://cloud.google.com/sdk/docs/install

Then,

	ruby run.rb [projectname] [ignorelist] [dryrun]

Option Name	Required	Description
ignorelist	No	a comma delimited list. if one of these items are in the member name, this member will be ignored
dryrun	No	if "dryrun" is specified anywhere in the command arguments, nothing will be send to gcp and executed

Example with ignore list, no dryrun option:

	ruby run.rb myproject jeff@,bigquery@,boss@

Example with ignore list, WITH dryrun option:

	ruby run.rb myproject jeff@,bigquery@,boss@ dryrun

Example with NO ignore list, WITH dryrun option:

	ruby run.rb myproject dryrun