google-cloud-resource-manager

问题 In Google Cloud Platform (GCP), you can use list APIs or commands to list resources in a given project for a given type in a given service, like BigQuery datasets or compute instances. But how to find or search resources across types, services, or even projects? 回答1: You can use search-all-resources to search all the resources across services (or APIs) and projects for a given organization, folder, or project. To search all the resources in a project with number 123: $ gcloud beta asset

问题 In Google Cloud Platform (GCP), you can only get the IAM policy for a specific resource by calling getIamPolicy (get-iam-policy in gcloud). Is there a way to list, search, list, search, or find IAM policies across resources, services, or projects? This is needed to answer questions like: What roles does a service account have? Which resources are shared publicly? Do policies contain deleted users? Does a user still appear in any policies after they leave my company? Does a user has a given