gcp-hardening

Enforce least-privilege IAM policies in Google Cloud Platform by reviewing existing service accounts and roles, then applying custom roles to restrict access across projects. This skill supports posture reviews and policy recommendations to ensure least-privilege compliance.

Harden VPC security in GCP by configuring recommended firewall rules and evaluating Private Google Access settings. This skill strengthens networking configurations to protect cloud resources and supports posture reviews for ongoing compliance.

Securely manage credentials in GCP Secret Manager by establishing practices for secure storage and rotation of secrets. This skill enables secret management governance to protect credentials and ensure secure usage across cloud projects.

Automate security remediation across GCP projects and organizations by applying IAM least privilege, VPC security, and Secret Manager governance. This skill supports automated remediation where supported alongside posture reviews and policy recommendations.

Provide a minimal project and policy description to begin prototyping security posture reviews. This skill uses these inputs to output policy recommendations and perform verification checks for least-privilege IAM and secure networking configurations.

Limitations when applying least-privilege IAM across cloud projects depend on automated remediation support and existing organization configurations. This skill describes inputs, outputs, and verification checks to address constraints during posture reviews and policy recommendations.