Grant temporary IAM permissions for on-call debugging on GCP projects.
npx skills add https://github.com/jamestexas/agents --skill break-glass
Please help me install this Agent Skill. Skill: break-glass Source: https://github.com/jamestexas/agents/tree/main/skills/break-glass Command: npx skills add https://github.com/jamestexas/agents --skill break-glass
Emergency IAM elevation for on-call and debugging across GCP projects, enabling temporary access once needed and ensuring revocation after use.
Invoke the break-glass workflow with a project hint or exact PROJECT_ID to temporarily grant access and revoke it when the task is complete.
High-intent search queries and answers about installing and using this skill.
This workflow grants temporary IAM permissions for on-call debugging by discovering GCP projects via hints or exact IDs, mapping short role names to full IAM roles, and outputting explicit grant commands for the gcloud CLI.
To ensure emergency IAM elevation is revoked, this workflow provides explicit revoke commands and cleanup reminders, ensuring temporary access granted for on-call debugging is safely removed from GCP projects.
Yes, you need the gcloud CLI to grant temporary GCP IAM access, because this workflow generates safe, auditable grant and revoke commands designed to be executed directly through the gcloud CLI.
Yes, you can discover a GCP project ID using partial hints, because the workflow identifies relevant GCP projects by hints or exact IDs before mapping short role names to full IAM roles for temporary grant and revoke workflows.
Mapping short role names to IAM roles works by translating simple role shortcuts into fully qualified GCP IAM role identifiers, streamlining the generation of explicit grant and revoke commands for emergency on-call access.
A limitation of using break-glass for emergency IAM elevation is that it outputs commands for the gcloud CLI rather than directly mutating IAM policies, requiring manual execution and cleanup by the on-call user to ensure temporary access is revoked.
pingwuGenerate precise gcloud commands for managing Google Cloud resources.
ssmleoFetch IAM recommendations and insights from Google Cloud for target scopes.
mattwyskielGenerate AWS IAM policies and manage roles for Lambda, Glue, and CloudTrail.
AcczdyDeploy CyberArk Zero Standing Privilege for ephemeral access tokens across AWS, Azure, and GCP.
