Google Cloud Platform Audit
Google Cloud Platform Audit gcp-audit takes a set of projects and audits them for common issues as defined by its ruleset. Issues can include, but are certainly not limited to, storage buckets with read/write permissions for anyone and compute engine instances with services exposed to the Internet. The results are written to a report containing information about issues that were found along with information about which objects these issues were found in so that it’s possible to address the problems. gcp-audit is currently in alpha status. We are actively improving it and Spotify’s production environment is our current test suite. Installation Run pip install git+https://github.com/spotify/gcp-audit.git. Usage usage: gcp-audit.py [-h] [-c CHECKS] [-k KEYFILE] [-o OUTPUT] [-p PROJECTS] A tool for auditing security properties of GCP projects. optional arguments: -h, --help show this help message and exit -c CHECKS, --check...