10110010011101001011001101101110101018200.devFrom Enterprise.Systems
免费开始
Google Cloud (GCP) logo

Google Cloud (GCP)

已上线身份与访问

Google Cloud (GCP) 连接器——只读、无代理

Audits your Google Cloud (GCP) project security posture — project IAM (service-account keys, primitive-role sprawl, inactive and external principals, public bindings), enabled APIs and API-key restrictions, Cloud Audit Log coverage and retention, VPC firewall exposure (SSH/RDP open to the internet), and public Cloud Storage buckets. Read-only.

连接 Google Cloud (GCP)← 返回所有连接器

我们扫描的内容

  • Project IAM policy bindings, service accounts and their key metadata, API keys and their restrictions, and enabled APIs (never resource data or key material)
  • Audit-log configuration and retention, VPC firewall rules, and Cloud Storage bucket IAM policies (never object contents)

只读监控——除非您开启自动修复并单独授予写入权限，否则您的 Google Cloud (GCP) 数据中的任何内容都不会发生变更。

安全发现

每次 Google Cloud (GCP) 扫描会运行 17 条检测规则。每条发现都附带通俗易懂的说明、支撑证据以及修复步骤。

  • CRITICALPublic exposure

    GCP IAM binding grants access to all (public) users

  • CRITICALPublic exposure

    GCP Cloud Storage bucket is public

  • HIGHStale access

    GCP service-account key not rotated in over 90 days

  • HIGHOver permission

    GCP service account has a project-level Owner/Editor role

  • HIGHExternal access

    External user has access to the GCP project

  • HIGHMisconfig

    GCP API key has no application (referrer/IP) restriction

  • HIGHPublic exposure

    GCP firewall allows SSH/RDP from the entire internet

  • MEDIUMOver permission

    GCP user has a project-level Owner/Editor primitive role

  • MEDIUMMisconfig

    GCP organization does not enforce MFA (2-Step Verification)

  • MEDIUMMisconfig

    GCP project has an overly-permissive API enabled

  • MEDIUMStale access

    GCP API key not rotated in over 90 days

  • MEDIUMMisconfig

    GCP Cloud Audit Logs are disabled for a service

  • MEDIUMMisconfig

    Vertex AI is enabled with no vertexai.* org policy

  • MEDIUMMisconfig

    Vendor AI-training data-contribution posture

  • LOWStale access

    GCP service account has been inactive for over 90 days

  • LOWMisconfig

    GCP log retention is shorter than 30 days

  • LOWMisconfig

    GCP project still has the legacy default network

如何连接 Google Cloud (GCP)

  1. 第 1 步

    注册或登录 8200.dev

  2. 第 2 步

    前往 连接器 → Google Cloud (GCP)

  3. 第 3 步

    点击 连接 并通过 Google Cloud (GCP) 的授权页面进行授权

  4. 第 4 步

    8200.dev 自动扫描——数分钟内即可看到结果

几分钟内接入您的第一个数据源——免费、只读，无需销售沟通。

连接 Google Cloud (GCP)查看全部 23 个连接器 →