iam-helper-for-policy-management
Streamlines the creation, modification, and management of IAM allow policies
by googleFree
Description
IAM helper for policy management is an agent skill for creating, changing and managing identity and access policies on Google Cloud. It covers the two policy paradigms the platform uses. IAM v1 allow policies grant a role to a principal, such as a user, service account, group or domain, on a resource. They work on Resource Manager resources such as organizations, folders and projects, and on individual resources in supported services. IAM v2 deny policies are explicit guardrails set at the organization, folder or project level that block specified principals from using designated permissions, whatever allow policies have been granted. The skill notes that deny policies are evaluated before allow policies, which matters when a user has been granted access but should still be blocked. It covers the lifecycle of creating and managing these policies. It is aimed at cloud administrators and security engineers who manage access across an organization and want a clear model of how the two kinds of policy interact. It is published by Google on skills.sh under the google skills repository, with about 2.0K installs. The skills.sh listing shows Gen Agent Trust Hub, Socket and Snyk all passing.…
Highlights
- Manages IAM v1 allow policies and v2 deny policies
- Covers Resource Manager and supported resources
- Explains that deny policies are evaluated first
- Lifecycle help for creating and changing policies
- Guardrails at organization, folder or project level
Ratings & Reviews
No ratings yet
Be the first to rate iam-helper-for-policy-management.
People also visit
iam-helper-for-policy-simulator
Safely simulates and applies Identity and Access Management (IAM) v1
iam-helper-for-privileged-access-management
Manages the end-to-end lifecycle of on-demand, temporary access
iam-helper-for-troubleshooting
Diagnoses, remediates, and manages Identity and Access Management
iam-recommendations-fetcher
Fetches raw IAM recommendations and associated security insights
browser-fingerprint-audit
Audit a browser fingerprint for internal contradictions with the liarjs CLI
iam-helper-for-policy-management FAQ
What is an IAM allow policy?
A policy that grants a role to a principal, such as a user, service account, group or domain, on a resource.
What is an IAM deny policy?
A guardrail at organization, folder or project level that blocks specified principals from designated permissions.
Which is evaluated first?
Deny policies are evaluated before allow policies, according to the skill.
How do I install it?
Run npx skills add https://github.com/google/skills --skill iam-helper-for-policy-management.
What are the best iam-helper-for-policy-management alternatives?
Popular alternatives to iam-helper-for-policy-management include iam-helper-for-policy-simulator, iam-helper-for-privileged-access-management and iam-helper-for-troubleshooting. See all iam-helper-for-policy-management alternatives