[EXTERNAL] Cloud Asset Inventory product updates | Dec 10, 2019
Sophia Yang
Google Cloud Asset Inventory Updates | Dec 20, 2019
ASSET SERVICES
Alpha launch: IAM Policy Analyzer
The frequently asked IAM Policy Analyzer feature is launched Alpha now! the Analyzer feature helps to answer the common access question “Who has access to what?”. In order to fully answer questions like “Who can read files from this GCS bucket”, “Who can access this service account?”, “What VMs can John delete in project prod?”, the product supports:
User group expansion, so even if a user is included in a group, we can still help identify their access.
Role to permission expansion, so you can query by permission and/or roles.
A limited set of resource expansion within the resource hierarchy. For example, in the query results, you can expand all VM instances within a project, or all projects under a folder.
Understanding the resource and policy hierarchy, so no matter where you are querying along the resource hierarchy, we will always find the effective IAM policies for you.
If you find that you might be interested in the features, please fill out the signup form. Please note, if you are already whitelisted for any Cloud Asset Inventory Alpha features, like IAM policy search, you DO NOT need to request to be whitelisted again, and you should be able to start using the new service right away! See more details in Documentation.
For any questions, please email gcp-asset-inventory...@googlegroups.com.
Want to join the mailing list? Please apply here, thank you so much!