Hello all,
We are super excited to announce that we just added new additions to the GCP Active Assist family: Asset Insights! As many Cloud Asset Inventory customers requested, the Asset Insights is to proactively detect potential risks in your asset configurations and settings. The initial set of Asset Insights are all focusing on identifying anomalies within your organization’s IAM policies, which may be opportunities for improving security pasture. The insights can be aggregated from the Organization, Folder or Project level.
There are 8 types of Asset Insights available\ to help you automatically detect:
External members in IAM policies.
External users that impersonate your service accounts.
External member as policy editors.
External users who can view cloud storage buckets.
Terminated users/groups that are still in IAM policies
IAM policies containing all users or all authenticated users.
Open cloud storage objects.
Projects with only terminated users as owners.
If you are interested, please fill in this Sign up form to sign up for the Private Preview release. Once signed up, please expect 1-2 business days for your request to be approved.
For how to use the API and Insights, see the User Guide.
Any questions? Please email gcp-asset-inventory...@googlegroups.com.
Thanks,
The Cloud Asset Inventory and Active Assist teams