Google Cloud (GCP)

利用可能アイデンティティとアクセス

Google Cloud (GCP) コネクター — 読み取り専用、エージェントレス

Audits your Google Cloud (GCP) project security posture — project IAM (service-account keys, primitive-role sprawl, inactive and external principals, public bindings), enabled APIs and API-key restrictions, Cloud Audit Log coverage and retention, VPC firewall exposure (SSH/RDP open to the internet), and public Cloud Storage buckets. Read-only.

Google Cloud (GCP) を接続 ← すべてのコネクターに戻る

スキャン対象

Project IAM policy bindings, service accounts and their key metadata, API keys and their restrictions, and enabled APIs (never resource data or key material)
Audit-log configuration and retention, VPC firewall rules, and Cloud Storage bucket IAM policies (never object contents)

読み取り専用での監視のため、自動修復を有効にして書き込みアクセスを別途付与しない限り、Google Cloud (GCP) のデータが変更されることはありません。

接続する前に

• A GCP project Owner (or an admin with security-reviewer + resource-manager read access) who can authorize the app via Google OAuth
• The Cloud Resource Manager and IAM APIs enabled on the project

標準的な初回スキャン時間: 1–4 minutes per project

要求される権限

https://www.googleapis.com/auth/cloud-platform.read-onlyRead-only access to your Cloud Platform resources — project IAM policy, service accounts and their keys, API keys, enabled APIs, audit-log configuration, VPC firewalls, and Cloud Storage bucket policies — to audit your project security posture. Never grants any write access.
https://www.googleapis.com/auth/cloudplatformprojects.readonlyRead the list and metadata of your GCP projects so the scan can identify which project it is auditing. Read-only.

セキュリティ検出結果

17件の検出ルールが、Google Cloud (GCP)のスキャンごとに実行されます。各検出結果には、平易な言葉による説明、その根拠となる証拠、および修復手順が付属します。

CRITICALPublic exposure
GCP IAM binding grants access to all (public) users
CRITICALPublic exposure
GCP Cloud Storage bucket is public
HIGHStale access
GCP service-account key not rotated in over 90 days
HIGHOver permission
GCP service account has a project-level Owner/Editor role
HIGHExternal access
External user has access to the GCP project
HIGHMisconfig
GCP API key has no application (referrer/IP) restriction
HIGHPublic exposure
GCP firewall allows SSH/RDP from the entire internet
MEDIUMOver permission
GCP user has a project-level Owner/Editor primitive role
MEDIUMMisconfig
GCP organization does not enforce MFA (2-Step Verification)
MEDIUMMisconfig
GCP project has an overly-permissive API enabled
MEDIUMStale access
GCP API key not rotated in over 90 days
MEDIUMMisconfig
GCP Cloud Audit Logs are disabled for a service
MEDIUMMisconfig
Vertex AI is enabled with no vertexai.* org policy
MEDIUMMisconfig
Vendor AI-training data-contribution posture
LOWStale access
GCP service account has been inactive for over 90 days
LOWMisconfig
GCP log retention is shorter than 30 days
LOWMisconfig
GCP project still has the legacy default network

Google Cloud (GCP)を接続する方法

ステップ1
8200.devにサインアップまたはログインします
ステップ2
Connectors → Google Cloud (GCP)に移動します
ステップ3
「Connect」をクリックし、Google Cloud (GCP)の同意画面から承認します
ステップ4
8200.devが自動的にスキャンを実行します — 結果は数分以内に表示されます

最初のソースを数分で接続 — 無料・読み取り専用・営業担当への連絡不要。

Google Cloud (GCP) を接続 23 件のコネクターをすべて見る →