prowler gcp

all

Assess Google Cloud Platform (GCP) security best practices, audits, and compliance checks. See also: `prowler`, `prowler-aws`, `prowler-azure`, `prowler-kubernetes`, `prowler-m365`, `prowler-github`.

More info →

Options (3)

-s, --servicesboolean

Run checks for selected GCP services

Example: prowler gcp {{[-s|--services]}} {{iam|compute|...}}

-c, --checksboolean

Run a specific GCP check

Example: prowler gcp {{[-c|--checks]}} {{gcp_storage_bucket_logging_enabled}}

-e, --excluded-checksboolean

Exclude specific checks or services

Example: prowler gcp {{[-e|--excluded-checks]}} {{gcp_storage_bucket_logging_enabled}} --exclude-services {{iam|compute|...}}

Examples (6)

Run the default set of checks on all accessible GCP projects using default user credentials

prowler gcp

Authenticate using a service account credentials file

prowler gcp --credentials-file path/to/credentials.json

Scan specific GCP projects by ID

prowler gcp --project-ids project_id1 project_id2 ...

Run checks for selected GCP services

prowler gcp [-s|--services] iam|compute|...

Run a specific GCP check

prowler gcp [-c|--checks] gcp_storage_bucket_logging_enabled

Exclude specific checks or services

prowler gcp [-e|--excluded-checks] gcp_storage_bucket_logging_enabled --exclude-services iam|compute|...

made by @shridhargupta | data from tldr-pages