google / google/cloud-forensics-utils

Provide basic hierarchical data for the targeted cloud provider

Open
#246 0 comments 0 reactions 0 assignees View on GitHub
AWS Azure GCP
Dominant language
Python
Stars
507
Forks
93
Avg merge
10m
Merged PRs (30d)
2

Description

This would help users stay within the CLI utility vs. grabbing said metadata to pivot on from other sources. The basic examples outlined below:

- Can be used for general info/scoping/pivoting.

- Some are required for operations (e.g. Project ID for GCP), which you may not always know/remember if you don't want to target what's configured locally

- A user may need to know every tenant/project/organization that exists so they can ensure they're grabbing data from everywhere applicable/available

## Azure
- subscriptions : `az account --list`
- tenants (not sure if this is possible)

## AWS
- list of organizations : `aws organizations list-accounts`

## GCP

- Org ID (if exists) : `gcloud organizations list --format='value(name)'`
- list of projects : `gcp projects list`
- build a visual hierarchy
It would be helpful to have some visual way to see how said GCP is set up. This would include:
- Enumerating all organizations (if any)
- Enumerating all folders (recursively, if any)
- Enumerating all projects (recursively)

Ideally, this would be some sort of “tree”, where you can easily identify:
- The type of node (organization, folder, project)
- Basic info. of said node (name, id)

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.