Skip to main content
NEW · Blast Radius: a field playbook for leaked API keys on AWS, GCP and Azure
Documentation menu

Integrations

GCP API key restriction analysis

Use the GCP analyzer entry to connect a project for API key restriction analysis.

Connect a GCP analyzer

  1. In Permission analyzers, select Add GCP Analyzer.
  2. Check the GCP provider on the cloud connection form that opens.
  3. Enter the analysis project's Project ID.
  4. Enter the same project's Project number.
  5. Choose Standard or Minimal under Install.
  6. Check that IAM permission analysis is selected.
  7. Select Create connection.

New analyzers use the project's Workload Identity Federation connection instead of a pasted key file. Choose a format in Setup and save it with Download. Review and apply the project permissions, then select Verify. Follow Google Cloud projects for the detailed setup sequence.

Check the registration

Return to the Registered Analyzers table and review the GCP row's connection status, account information, and registration date. Its cloud detail button opens the project's permission and feature usage state.

Analysis helps investigate API key restrictions and access scope. It does not represent actual API call history or every permission evaluation.

GCP analyzer connection and project setup
GCP analyzer connection and project setup