performing-gcp-security-assessment-with-forseti

What problem does it solve?

This Skill provides a structured framework to audit Google Cloud Platform environments for IAM policy compliance, firewall exposure, and storage permissions using Forseti Security, Security Command Center, and the gcloud CLI.

Core Features & Use Cases

• IAM policy auditing across organizations and projects to identify overly permissive bindings.
• Network and firewall assessment to detect exposed ingress rules and misconfigurations.
• Storage permissions and encryption checks to ensure buckets are not publicly accessible and use proper CMEK/uniform access.
• Compliance alignment with CIS GCP Foundations and ongoing monitoring for multi-project environments.

Quick Start

Run the agent against your GCP organization to produce a security assessment report.