Overview

This Python script simplifies authentication and resource listing in Google Cloud Platform (GCP).

It automates the process of authenticating GCP service accounts using JSON key files and provides a convenient way to list various GCP resources.

Usage

Make sure you have the Google Cloud SDK installed, as the tool utilizes the gcloud, gsutil, and bq commands.

To authenticate and test GCP resource access, use the following command:

python3 gcp_enum.py -f <path_to_json_key_file> -o <output_file>

You can also list available service accounts that you have authenticated previously with:

python3 gcp_enum.py -l

To switch to a specific service account and run tests, use the following command:

python3 gcp_enum.py -s <service_account_email> -o <output_file>

All options:

options:
  -h, --help            show this help message and exit
  -l, --list-accounts   List available service accounts and exit
  -s SERVICE_ACCOUNT, --service-account SERVICE_ACCOUNT
                        Switch to the specified service account and run tests
  -f FILE, --file FILE  Path to the JSON key file
  -o OUTPUT, --output OUTPUT
                        Path to the output file
  -t TIMEOUT, --timeout TIMEOUT
                        Timeout in seconds (default: 30)

Tests

The script performs various tests to list GCP resources, including:

AI Platform Jobs
AI Platform Models
BigQuery
Cloud Bigtable Instances
Cloud Filestore Instances
Cloud Functions
Cloud KMS Keyrings
Cloud Run GKE Services
Cloud Run Managed Services
Cloud Spanner Instances
Cloud SQL Instances
Cloud Storage Buckets
Compute Engine Backend Services
Compute Engine Firewall Rules
Compute Engine Images
Compute Engine Instance Templates
Compute Engine Network Subnets
Container Images
GCP Projects
IAM Service Accounts
Kubernetes Engine Clusters
Pub/Sub Subscriptions
Pub/Sub topics
Secrets

Examples

Output

Output file example

References

While developing the tool I found this script from Chris Moberly and I realized that I had some tests that I missed to add.