Dollhouse

Dollhouse is a tool to audit Google Cloud Platform (GCP). As there are many components in GCP, it aims to be the one tool that can audit the whole platform for you. It can be used by Security Engineers and DevOps engineers to monitor the whole organization infrastructure. Dollhouse is also able to send alerts based on pre-configured events.

High-Level Architecture

Currently supports:

•  Firewall Rules
•  IAM Roles
•  Service Accounts

To run the audit, you can choose what you want to check (Firewall, IAM) by adding the required arguments This script can be run on your local machine with your own user. It will fetch the projects that your account has access to. Ideally, you should create an account/serviceaccount which has organization-level viewer access so that it becomes easier to run on all the projects.

Dollhouse-bot

Dollhouse-bot is a slack bot which gives instant alerts on slack to custom events that you have set. This bot leverages Google Stackdriver Logging & Monitoring to check for events in a GCP Project.

Install && Use

Copyright 2019 security