Python scripts for collecting and visualising Google Cloud Platform IAM permissions
GCP IAM graph is created using vis.js and it's static HTML page, see example interactive graph
GCP IAM collector iterates over projects using Google Cloud Resource Manager API and dumps to CSV files:
- all available GCP projects,
- projects IAM permissions,
- projects service account and their keys,
- BigQuery dataset ACLs,
- Cloud Storage bucket ACLs
IAM graph currently supports:
- GCP projects and their permissions,
- Service accounts and their permissions
- Install dependencies:
pip install -r requirements.txt
- Install gcloud CLI tool.
- Setup Google Application Default Credentials:
gcloud auth application-default login
Command below dumps all IAM to csv files
python collector.py
Creating interactive graph:
python create_iam_graph.py