rigup / ephemeral-iamLinks
A CLI tool for temporarily escalating GCP IAM privileges to perform high privilege tasks.
☆29Updated 2 years ago
Alternatives and similar repositories for ephemeral-iam
Users that are interested in ephemeral-iam are comparing it to the libraries listed below
Sorting:
- Exports primitive and predefined GCP IAM Roles and their permissions☆110Updated last week
- Compares and analyzes GCP IAM roles.☆78Updated 11 months ago
- Tweets when new GCP IAM updates are found☆12Updated last week
- ☆14Updated 3 years ago
- Take automated actions against threats and vulnerabilities.☆216Updated 2 years ago
- ☆25Updated last year
- ☆39Updated 4 years ago
- JIT Groups is an open source application that lets you implement secure, self-service access management for Google Cloud using groups.☆283Updated this week
- GCP CSPM using Google Sheets☆38Updated 10 months ago
- ☆115Updated 5 months ago
- GCP Auto Remediation Suite for High Risk Events☆43Updated 4 years ago
- Automated testing, generation & manipulation of #osquery packs☆74Updated last year
- Golang library which provides functionality to evaluate GCP resources against Rego-based policies☆48Updated 2 weeks ago
- Clean accounts over permissions in GCP infra at scale☆71Updated 2 years ago
- ☆28Updated 5 years ago
- Attaché provides an emulation layer for Cloud Provider IMDS APIs☆60Updated last month
- ☆57Updated 2 weeks ago
- Python script for collecting and visualising Google Cloud Platform IAM permissions☆51Updated 8 years ago
- prel(iminary) is an application that temporarily assigns Google Cloud IAM Roles and includes an approval process.☆45Updated this week
- Automated GKE Kubelet Impersonation and Cluster Secret Stealer via kube-env☆102Updated 6 years ago
- a tool to audit the istio service mesh☆174Updated 4 years ago
- Be notified in the event of a new GCP Organization Policy being released.☆25Updated last year
- Kubernetes audit logging, when you don't control the control plane☆90Updated this week
- Google Cloud Platform (GCP) Security Command Center Alerts enablement scripts☆32Updated 4 years ago
- Audit log wall of shame.☆42Updated 5 months ago
- Template Go app repo with local test/lint/build/vulnerability check workflow, and on tag image test/build/release pipelines, with ko gene…☆103Updated last year
- GKE CIS 1.1.0 Benchmark InSpec Profile☆26Updated 4 years ago
- Creates needed resources for federating access between a GCP service account and AWS IAM role.☆29Updated last year
- Security testing tool for Kubernetes, abusing kubelet credentials on public cloud providers.☆163Updated 2 months ago
- PolicyGlass allows you to analyse one or more AWS policies' effective permissions in aggregate, by restating them in the form of PolicySh…☆60Updated 4 years ago