What problem does it solve?
Manually retrieving and filtering active IAM policy recommendations across Google Cloud organizations, folders, or projects is time-consuming and often leads to missed critical security misconfigurations that could expose cloud resources to risk.
Core Features & Use Cases
- Validated Target Scope Handling: Automatically validates and formats target resource identifiers (organizations, folders, projects), including resolving ambiguous raw IDs and project numbers to the correct resource type.
- Multi-Method Recommendation Retrieval: Fetches active IAM recommendations and associated security insights via preferred MCP tools, gcloud CLI, or direct Google Cloud API calls with fail-fast error handling to avoid redundant failed requests.
- Flexible Output Formatting: Delivers results in user-preferred formats, either as a timestamped JSON file or a sorted markdown table with full insights saved to a downloadable markdown file.
- Use Case: Cloud security teams can use this skill to quickly pull all active IAM misconfiguration recommendations for a production project to prioritize high-risk remediation tasks.
Quick Start
Use the iam-recommendations-fetcher skill to retrieve all active IAM recommendations and insights for the Google Cloud project 'my-production-project' and return the results as a markdown table.