Get a Demo
Under Attack?
Flowchart diagram with a central user icon connected to five icons: Google, a cloud, a group of people, a link, a shield, and a chip, representing connectivity and integrations. The Upwind logo is at the top left.

Secure Google Cloud Identities with Upwind’s Human Identity Management

July 25, 2024

Secure Google Cloud Identities with Upwind’s Human Identity Management

Upwind’s support for Human Identity Management in Google Cloud gives you the ability to easily surface, understand and fix risky misconfigurations including over-privileged or excessive permissions, ensuring a more secure Google Cloud environment.

Managing human identities in the cloud can be incredibly challenging for organizations, especially when they use multiple cloud providers or different identity providers (IdPs). Upwind solves this by providing comprehensive human identity security for Google Cloud, giving deep visibility of all human users including IAM users and IdP users.

Screenshot-2024-07-16-at-12.19.16 PM-1024x415

With Upwind’s Identity Security, you can easily view all users in your Google Cloud organization, including the groups to which a specific identity belongs, the accounts in which it has permissions, its roles, and the actual permissions of the identity.

Screenshot-2024-07-16-at-12.18.50 PM-1024x549

With Upwind’s human identity management for Google Cloud, you can view:

  • IAM & IdP Users: Automatically discover and view a comprehensive list of all IAM and Identity Provider users in your environment.
  • A Comprehensive Identity Oview: Easily view information about human users, including:
    • General details such as the user name, display name, IdP and last login
    • The groups to which an identity belongs
    • A list of all projects on which the identity has permissions to perform actions
    • All roles associated with the identity
  • Identity Scope: Easily filter projects and view associated identity permissions and view an authorization graph of the identity’s permissions
Screenshot-2024-07-16-at-12.18.42 PM-1024x721

Use Upwind’s Human Identity Security to easily discover, monitor and manage human identities in Google Cloud and across cloud providers, giving you centralized insights into permissions and helping you proactively manage and mitigate potentially identity security risks.

Contents

Further Reading

Yuval_ArgoCD Research

ArgoCD repoURL XSS: How a Missing Scheme Check Becomes Cluster Takeover 

Executive Summary  This stored cross-site scripting (XSS) vulnerability in ArgoCD [versions <= 3.4.4] allows an attacker who can create or modify an Application to persist a malicious repoURL, which is subsequently executed in an administrator's browser within the Argo CD origin. Because the payload executes in the context of the administrator's authenticated session, and because…
Custom-Reporting-Hero

Security Reporting Built Around Your Program

We've all been there: it's 3:00 PM on a Friday, and you get that "quick" request for a specific security status report. Suddenly, your afternoon is gone as you juggle filters, export CSVs, and try to explain to someone outside the security team why these numbers actually matter. Reporting shouldn't feel like a fire drill…
Blue-agent-blog

Introducing the Upwind Blue Agent: Autonomous Threat Investigation for the SOC

We’re excited to announce that the Upwind Blue Agent is now available in Beta. Blue is an AI-powered SOC investigator that autonomously investigates Upwind Threat Stories end to end. It gathers and correlates security context across the customer environment, evaluates the available evidence, and delivers one of three clear verdicts: Each verdict includes supporting reasoning…
Add the Upwind RSS Feed to Slack
Connect the Upwind RSS Feed to your Slack.
Follow the how-to here.
Threat RSS
Add the Upwind RSS Feed to Slack
Connect the Upwind RSS Feed to your Slack.
Follow the how-to here.
Main RSS