iam-recommendations-fetcher

To fetch IAM recommendations, provide a valid target scope like an organization ID, folder, or project ID. The skill validates the input format and retrieves recommendations using MCP tools, gcloud CLI, or direct Google Cloud API calls.

Google Cloud IAM recommendations and insights are used for security reviews and IAM policy management. They identify overly permissive roles and suggest safer alternatives, simplifying the process of auditing access controls across your cloud environment.

Yes, you can retrieve IAM analysis for folders and projects. The skill validates target scopes across organizations, folders, and projects to ensure proper formatting before attempting to fetch recommendations and insights.

You do not strictly need gcloud CLI as the only method, but it is a required dependency. The skill uses a fallback flow that attempts retrieval via MCP tools, then gcloud CLI, and finally direct Google Cloud API calls.

Available output formats for IAM analysis results are a JSON file or a Markdown table. You select the desired output format, and the skill returns the fetched recommendations and insights in that structure.

Your IAM recommendations retrieval stops and returns a standardized error JSON upon failure. This built-in error handling triggers when the target scope format is invalid or if retrieval fails across MCP tools, gcloud CLI, and API fallbacks.