How Secure is GAM to Use?

[David Musser]

This looks like an amazing tool, but I did not see a lot about security as far as of the tool itself.

Has anyone investigated this? I'm sending to my security team to check out.

[Ian Crew]

Well, it’s fully open-source, it only talks to Google’s APIs, and it doesn’t expose any services of its own. It’s also possible to secure the credentials for GAM with a YubiKey: see https://github.com/GAM-team/GAM/wiki/Use-a-Yubikey

So I personally don’t think there’s much risk. 

Just my 2 cents,

Ian

On Wed, Apr 12, 2023 at 12:46 PM David Musser <dmu...@dmusser.com> wrote:

This looks like an amazing tool, but I did not see a lot about security as far as of the tool itself.

Has anyone investigated this? I'm sending to my security team to check out.

--
You received this message because you are subscribed to the Google Groups "GAM for Google Workspace" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-apps-man...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/google-apps-manager/e55d24cc-99fe-426e-aead-edc42a1022d6n%40googlegroups.com.

--

Ian Crew Solutions Architect Productivity & Collaboration Services Information Services and Technology

[David Musser]

Thank you. From what I saw I believe exactly as you do. I will post if I find any different. Thank you. 

You received this message because you are subscribed to a topic in the Google Groups "GAM for Google Workspace" group.
To unsubscribe from this topic, visit https://groups.google.com/d/topic/google-apps-manager/-71p_FkcJJ4/unsubscribe.
To unsubscribe from this group and all its topics, send an email to google-apps-man...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/google-apps-manager/CAD2sLFs0bQAaugbd%2Bm55RG5EW1%2BB7oODs7781-wEsRcSzEDZkw%40mail.gmail.com.