Google Cloud (GCP)
DisponívelIdentidade e AcessoConector Google Cloud (GCP) — apenas de leitura, sem agentes
Audits your Google Cloud (GCP) project security posture — project IAM (service-account keys, primitive-role sprawl, inactive and external principals, public bindings), enabled APIs and API-key restrictions, Cloud Audit Log coverage and retention, VPC firewall exposure (SSH/RDP open to the internet), and public Cloud Storage buckets. Read-only.
O que analisamos
- Project IAM policy bindings, service accounts and their key metadata, API keys and their restrictions, and enabled APIs (never resource data or key material)
- Audit-log configuration and retention, VPC firewall rules, and Cloud Storage bucket IAM policies (never object contents)
Monitorização em modo de leitura exclusiva — nada nos seus dados de Google Cloud (GCP) é alterado, a menos que ative a remediação automática e conceda acesso de escrita separadamente.
Deteções de segurança
17 regras de deteção são executadas em cada análise de Google Cloud (GCP). Cada deteção é acompanhada de uma explicação em linguagem clara, das evidências subjacentes e dos passos de remediação.
- CRITICALPublic exposure
GCP IAM binding grants access to all (public) users
- CRITICALPublic exposure
GCP Cloud Storage bucket is public
- HIGHStale access
GCP service-account key not rotated in over 90 days
- HIGHOver permission
GCP service account has a project-level Owner/Editor role
- HIGHExternal access
External user has access to the GCP project
- HIGHMisconfig
GCP API key has no application (referrer/IP) restriction
- HIGHPublic exposure
GCP firewall allows SSH/RDP from the entire internet
- MEDIUMOver permission
GCP user has a project-level Owner/Editor primitive role
- MEDIUMMisconfig
GCP organization does not enforce MFA (2-Step Verification)
- MEDIUMMisconfig
GCP project has an overly-permissive API enabled
- MEDIUMStale access
GCP API key not rotated in over 90 days
- MEDIUMMisconfig
GCP Cloud Audit Logs are disabled for a service
- MEDIUMMisconfig
Vertex AI is enabled with no vertexai.* org policy
- MEDIUMMisconfig
Vendor AI-training data-contribution posture
- LOWStale access
GCP service account has been inactive for over 90 days
- LOWMisconfig
GCP log retention is shorter than 30 days
- LOWMisconfig
GCP project still has the legacy default network
Como ligar Google Cloud (GCP)
Passo 1
Registe-se ou inicie sessão em 8200.dev
Passo 2
Aceda a Conectores → Google Cloud (GCP)
Passo 3
Clique em Ligar e autorize através do ecrã de consentimento de Google Cloud (GCP)
Passo 4
O 8200.dev efetua análises automaticamente — os resultados surgem em poucos minutos
Ligue a sua primeira fonte em minutos — gratuito, só de leitura, sem contacto comercial.