iam-helper-for-policy-simulator
Safely simulates and applies Identity and Access Management (IAM) v1
by googleFree
Description
IAM helper for policy simulator is an agent skill that helps you change IAM allow policies on Google Cloud safely. Its core rule is that a modifying policy change is never applied without a policy simulation first. The Policy Simulator replays the last 90 days of access logs against the proposed policy, to check whether any access that has happened historically would be blocked by the change. That tells you whether existing workloads would be disrupted before you apply anything. The skill uses only standard public gcloud commands. It explains the prerequisites: the environment needs the policy simulator admin role, the cloud asset viewer role and the appropriate IAM admin role for the target resource. Changes can target a project, a folder or an organization. It is aimed at security and platform teams who want to tighten access without breaking production, and who want the impact checked against real access history. It is published by Google on skills.sh under the google skills repository, with about 3.4K installs. The skills.sh listing shows Gen Agent Trust Hub, Socket and Snyk all passing.…
Highlights
- Simulates policy changes before applying them
- Replays the last 90 days of access logs
- Uses only public gcloud commands
- Can target projects, folders or organizations
- Lists the roles needed to simulate and apply
Ratings & Reviews
No ratings yet
Be the first to rate iam-helper-for-policy-simulator.
People also visit
iam-helper-for-policy-management
Streamlines the creation, modification, and management of IAM allow policies
iam-helper-for-privileged-access-management
Manages the end-to-end lifecycle of on-demand, temporary access
iam-helper-for-troubleshooting
Diagnoses, remediates, and manages Identity and Access Management
iam-recommendations-fetcher
Fetches raw IAM recommendations and associated security insights
agent-platform-eval-flywheel
Measures and improves the quality of AI models and agents on Google Cloud
iam-helper-for-policy-simulator FAQ
What does the simulator check?
Whether any access that happened in the last 90 days would be blocked by a proposed IAM allow policy change.
Will the skill apply a change without simulation?
No. The skill says it must never apply a modifying policy change without first running a policy simulation.
What roles are needed?
The policy simulator admin role, the cloud asset viewer role, and the IAM admin role for the target resource.
How do I install it?
Run npx skills add https://github.com/google/skills --skill iam-helper-for-policy-simulator.
What are the best iam-helper-for-policy-simulator alternatives?
Popular alternatives to iam-helper-for-policy-simulator include iam-helper-for-policy-management, iam-helper-for-privileged-access-management and iam-helper-for-troubleshooting. See all iam-helper-for-policy-simulator alternatives