jasonbisson Goto Github PK

github_backup

google_cloud_download_iam_roles

This repository contains a simple bash script to export the GCP predefined IAM roles into the temp directory. The goal of this script is to provide method to easily review the permissions in each role for possible custom roles.

google_cloud_find_exempt_identities

Find the "invisible" identities already exempt from admin read, data write, or data read events

google_cloud_iam_reporting

Google Cloud Identity Access Management (IAM) reporting

google_cloud_iam_usage

This repository will assist with searching for permissions used by Google identity within a timespan of x days at the project level.

google_cloud_kms_import

This repository will go through the fun adventure of importing a symmetric key into KMS with software or hardware protection with Cloud HSM. The terraform deployment will deploy a linux instance and Cloud NAT instance with a startup script that installs all the required packages required to wrap the key before import and attempts to import a symmetric key. In addition, there are scripts run through the process manually.

google_cloud_managed_ad

This repository will deploy a highly-available Managed Active directory domain and a windows Compute instance to bind to the new Managed AD domain. In addition, there are optional powershell scripts to add users to the new domain and simulated a sync to Cloud Identity using Google Cloud Directory Sync.

google_cloud_organization_restrictions

google_cloud_scc_settings

To address this Mitre technique of impairing defenses, I've created a tactical script that enables the four core services at the organization, folder, and projects levels.

google_cloud_scc_training

This repository will deploy insecure infrastructure and how SCC reports the findings.

google_cloud_search_assets

This repository will focus on providing visibility of Cloud Resources and IAM, Org, Access policies at the GCP organization level.

google_cloud_service_account_keys

This repository contains code and documentation for creating/deleting a service account, protect the service account key file with GCP KMS, destroying a service account key, and validating the service account key with simple Python script listing buckets.

google_cloud_service_accounts

This repository contains code for creating/deleting a service account, creating a user-managed key, destroying a key, and validating the key with a Python script listing buckets in a project.

google_cloud_terraform_authetication

This repository is the "walk" version of learning how to run terraform deployments on Google Cloud.

google_cloud_terraform_container

This is a fork from [cloud builders repo](https://github.com/GoogleCloudPlatform/cloud-builders-community). It's solid repo, but I only wanted Terraform builder to have know provenance for the Terraform binary.

pivotal_install

Simple bash scripts to automate the deployment of Pivotal on Google Cloud Platform

terraform-google-analytics

terraform-google-chronicle-security-operations

terraform-google-cos-only

terraform-google-dataloss-prevention

terraform-google-pam

terraform-google-prompt-injection

terraform-google-security-health-checker-1

terraform-google-service-account-keys

terraform-google-splunk

The module will create a single compute engine instance to host Splunk Enterprise (trial version) and set up a pub/sub topic to export Stackdriver log events which will be pulled into Splunk Enterprise.

terraform-google-vertex-search

terraform-google-vertex-workbench

terraform-google-virtual-machine-threat-detection

terraform-google-vpcsc-dashboard

terraform-google-workforce-identity-federation

terraform-google-workforce-identity-federation