iam

Documentation

Index

• func GetPermissionsByServiceAccounts(account internal.GCPAccount) map[string][]string
• func GetServiceAccountKeys(account internal.GCPAccount) []*adminpb.ServiceAccountKey
• func RunChecks(wa *sync.WaitGroup, account internal.GCPAccount, c *commons.Config, ...)
• func SACannotEscalatePrivileges(resource commons.Resource) bool
• func SAKeysNotOlderThan90Days(resource commons.Resource) bool
• type PermissionsBySA
  • func (p *PermissionsBySA) GetID() string
• type SAKey
  • func (k *SAKey) GetID() string

Functions

func GetPermissionsByServiceAccounts

func GetPermissionsByServiceAccounts(account internal.GCPAccount) map[string][]string

Get a map of service account -> permission(s) for the current project

func GetServiceAccountKeys

func GetServiceAccountKeys(account internal.GCPAccount) []*adminpb.ServiceAccountKey

Produce a list of service account keys existing in the GCP project

func RunChecks

func RunChecks(wa *sync.WaitGroup, account internal.GCPAccount, c *commons.Config, queue chan []commons.Check)

func SACannotEscalatePrivileges

func SACannotEscalatePrivileges(resource commons.Resource) bool

func SAKeysNotOlderThan90Days

func SAKeysNotOlderThan90Days(resource commons.Resource) bool

Types

type PermissionsBySA

type PermissionsBySA struct {
	SA          string
	Permissions []string
}

func (*PermissionsBySA) GetID

func (p *PermissionsBySA) GetID() string

type SAKey

type SAKey struct {
	Key *adminpb.ServiceAccountKey
}

func (*SAKey) GetID

func (k *SAKey) GetID() string