Run security controls across all your Google Cloud Platform projects to look for resources that are publicly accessible, shared with untrusted entities, have insecure network configurations, and more using Powerpipe and Steampipe.

gcp_perimeter

GCP Perimeter

Apache License 2.0

steampipe-mod-gcp-perimeter

A list of trusted Google Workspace domains that can be granted access to resources.

trusted_domains

A list of common dimensions to add to each control.

common_dimensions

A list of tags to add as dimensions to each control.

tag_dimensions

A list of trusted Google Account emails that can be granted access to resources.

trusted_users

A list of trusted Google Groups that can be granted access to resources.

trusted_groups

A list of trusted service accounts that can be granted access to resources.

Name	Default	Description
trusted_domains	`[ "trusted-company.com", "trusted-partner.com" ]`	A list of trusted Google Workspace domains that can be granted access to resources.
common_dimensions	`[ "project", "location" ]`	A list of common dimensions to add to each control.
tag_dimensions	-	A list of tags to add as dimensions to each control.
trusted_users	`[ "user1@example.com", "user2@example.com" ]`	A list of trusted Google Account emails that can be granted access to resources.
trusted_groups	`[ "admins@googlegroups.com", "developers@googlegroups.com" ]`	A list of trusted Google Groups that can be granted access to resources.
trusted_service_accounts	`[ "app-sa@project-id.iam.gserviceaccount.com" ]`	A list of trusted service accounts that can be granted access to resources.

Variables in GCP Perimeter