Skip to content

Latest commit

 

History

History
43 lines (28 loc) · 1.27 KB

README.md

File metadata and controls

43 lines (28 loc) · 1.27 KB
Raw

Automatically Enforce least privilege with recommendations by GCP.

GCP gives you recommendations on your IAM permissions. Often users have too much privilege based on a 90 day look back window. This script will automatically apply the GCP IAM permissions recommended by google by REMOVING roles no longer needed by the user.

Example of excess privileges and a given recommendation

How to run

First! Setup gcloud for your project. https://cloud.google.com/sdk/docs/install

Then,

	ruby run.rb [projectname] [ignorelist] [dryrun]
Option Name Required Description
ignorelist No a comma delimited list. if one of these items are in the member name, this member will be ignored
dryrun No if "dryrun" is specified anywhere in the command arguments, nothing will be send to gcp and executed

Example with ignore list, no dryrun option:

	ruby run.rb myproject jeff@,bigquery@,boss@

Example with ignore list, WITH dryrun option:

	ruby run.rb myproject jeff@,bigquery@,boss@ dryrun

Example with NO ignore list, WITH dryrun option:

	ruby run.rb myproject dryrun