Skill UI

Use GCPBucketBrute plus gcloud IAM inspection to enumerate buckets, probe permissions, audit bindings, inspect service accounts, and map privilege escalation paths for cloud security testing.

Run Forseti, Security Command Center, ScoutSuite, and gcloud automation to audit IAM bindings, firewall rules, storage permissions, and CIS GCP Foundations Benchmark compliance across organizations, supporting onboarding, periodic audits, and continuous monitoring.

Structured process for reviewing privileged account entitlements across PAM and IAM platforms, validating justifications, enforcing least privilege, and triggering remediations to satisfy SOC 2/PCI/HIPAA compliance requirements.

Provides automated discovery and inventorying of privileged accounts across enterprise infrastructure, covering domain admins, local admins, service accounts, databases, cloud IAM roles, and application admins with risk classification and PAM onboarding.

Guides teams through assessing IAM entities, scoping policies, enabling Access Analyzer, and enforcing permission boundaries plus MFA so AWS accounts follow least-privilege practices and reduce risks from compromised identities.

Guides teams through auditing Lambda execution roles, analyzing CloudTrail/Access Analyzer data, crafting least-privilege IAM policies, applying permission boundaries, and scoping roles with SCPs to lock down serverless access.

Guides teams to harden AWS Lambda, Azure Functions, and GCP Cloud Functions by enforcing least-privileged IAM roles, eliminating hardcoded secrets, scanning dependencies, validating inputs, and enabling monitoring so serverless workloads resist injection, credential theft, and supply-chain threats.