iam-recommendations-fetcher

What problem does it solve?

Manually retrieving and filtering active IAM policy recommendations across Google Cloud organizations, folders, or projects is time-consuming and often leads to missed critical security misconfigurations that could expose cloud resources to risk.

Core Features & Use Cases

• Validated Target Scope Handling: Automatically validates and formats target resource identifiers (organizations, folders, projects), including resolving ambiguous raw IDs and project numbers to the correct resource type.
• Multi-Method Recommendation Retrieval: Fetches active IAM recommendations and associated security insights via preferred MCP tools, gcloud CLI, or direct Google Cloud API calls with fail-fast error handling to avoid redundant failed requests.
• Flexible Output Formatting: Delivers results in user-preferred formats, either as a timestamped JSON file or a sorted markdown table with full insights saved to a downloadable markdown file.
• Use Case: Cloud security teams can use this skill to quickly pull all active IAM misconfiguration recommendations for a production project to prioritize high-risk remediation tasks.

Quick Start

Use the iam-recommendations-fetcher skill to retrieve all active IAM recommendations and insights for the Google Cloud project 'my-production-project' and return the results as a markdown table.