| ScoutSuite |
- Multi-cloud security auditing tool
- Permissions:
Viewer, Security Reviewer, Stackdriver Account Viewer - Enable
Service Usage API - Usage:
docker run --rm -it -v ~/creds/:/creds -v $(pwd)/:/src/ rossja/ncc-scoutsuite scout --provider gcp --service-account --key-file service_account.json --project-id <projectID>
|
| CS-Suite |
- Auditing the security posture of AWS/GCP/Azure infrastructure
- Permissions:
Viewer, Security Reviewer, Stackdriver Account Viewer - Usage:
docker run --rm -it -v ~/creds/:/creds -v $(pwd)/:/src/ securityftw/cs-suite -env gcp -pId <project_name>
|
| GCP CIS Benchmark Inspec Profile |
- Usage:
inspec exec https://github.com/GoogleCloudPlatform/inspec-gcp-cis-benchmark.git -t gcp:// --input gcp_project_id=<YOUR_PROJECT_ID>
|
| cloudlist |
- Obtain public assets (hostnames, IPs)
|
| gcptree |
- Like the unix
tree command but for GCP Org hierarchy
|