rigup / ephemeral-iam
A CLI tool for temporarily escalating GCP IAM privileges to perform high privilege tasks.
☆28Updated last year
Alternatives and similar repositories for ephemeral-iam:
Users that are interested in ephemeral-iam are comparing it to the libraries listed below
- Compares and analyzes GCP IAM roles.☆77Updated 8 months ago
- ☆14Updated 2 years ago
- ☆39Updated 3 years ago
- ☆25Updated 7 months ago
- GKE CIS 1.1.0 Benchmark InSpec Profile☆27Updated 3 years ago
- Exports primitive and predefined GCP IAM Roles and their permissions☆109Updated this week
- Python script for collecting and visualising Google Cloud Platform IAM permissions☆50Updated 7 years ago
- Automated testing, generation & manipulation of #osquery packs☆72Updated 4 months ago
- GCP CSPM using Google Sheets☆34Updated 8 months ago
- Tweets when new GCP IAM updates are found☆12Updated this week
- ☆28Updated 4 years ago
- Take automated actions against threats and vulnerabilities.☆213Updated last year
- This lab demonstrates some of the security concerns of a default Kubernetes Engine cluster configuration and the corresponding hardening …☆17Updated 5 years ago
- Google Cloud Platform (GCP) Security Command Center Alerts enablement scripts☆30Updated 3 years ago
- Be notified in the event of a new GCP Organization Policy being released.☆25Updated last month
- GCP Auto Remediation Suite for High Risk Events☆42Updated 3 years ago
- Like the unix tree command but for GCP Org Heirarchy☆27Updated 3 years ago
- Best practice example for secure and compliant Google Cloud Platform infrastructure☆103Updated 2 years ago
- Time limited, auto-expiring group memberships for users on Google Cloud☆14Updated 2 years ago
- An application to help with IP Address Management (IPAM) for Google Kubernetes Engine (GKE) clusters. Easily allows the calculation of th…☆59Updated this week
- Tooling to simulate runtime attacks and test default runtime detections from Datadog Cloud Security Management.☆30Updated 4 months ago
- JIT Groups is an open source application that lets you implement secure, self-service access management for Google Cloud using groups.☆252Updated this week
- Golang library which provides functionality to evaluate GCP resources against Rego-based policies☆44Updated this week
- Kubernetes audit logging, when you don't control the control plane☆67Updated this week
- Automated GKE Kubelet Impersonation and Cluster Secret Stealer via kube-env☆102Updated 5 years ago
- ☆111Updated last month
- GCP PCI-DSS 3.2.1 InSpec Profile☆18Updated 3 years ago
- A repository to store Rad Fingerprinting data.☆23Updated 6 months ago
- Clean accounts over permissions in GCP infra at scale☆71Updated last year
- ☆74Updated 2 months ago