New Cloud Asset Inventory capabilities help assess your Google Cloud environment

Google Cloud Welcomes EU’s new Standard Contractual Clauses for cross-border data transfers
June 8, 2021
Google Cloud VMware Engine now HIPAA compliant
June 8, 2021
Google Cloud Welcomes EU’s new Standard Contractual Clauses for cross-border data transfers
June 8, 2021
Google Cloud VMware Engine now HIPAA compliant
June 8, 2021

Asset discovery and DataDog integration

A new asset list service in CAI provides quick and comprehensive asset discovery, including asset history, without needing to export the data to a storage destination. DataDog, a leading multi-cloud monitoring and security service provider, relies on deep integration with CAI for service and asset discovery. DataDog has been piloting and taking full advantage of the newly released asset list service. DataDog Product Manager, Steve Harrington, commented:

“Google’s new Cloud Asset Inventory API provides us with an immensely valuable, single source of truth for determining the resources present in a given GCP environment. Along with its rich metadata, this enables us to enhance multiple aspects of our integration with GCP, including streamlined metric collection and ingestion of custom labels. We plan to continue building around Cloud Asset Inventory in the future to improve existing features, and are envisioning ways it could help us provide entirely new insights to our customers.”

Answer “who can access what resources?”

Determining authoritative answers to security-related questions like “Who can read data from my storage bucket that contains PII?” or “Does a terminated employee still have any remaining access to my system?” can be difficult and time consuming. This is why access management and identity certification is one of the top security priorities for enterprises running workloads in the cloud. To help alleviate this challenge, the new Policy Analyzer capability in CAI thoroughly analyzes the relationship between IAM policies and resources. The analysis includes powerful and efficient group expansion, service account impersonation, conditional access analysis, resource expansion, and more. You can even export the results to a BigQuery table or Cloud Storage bucket for further analysis and record keeping. CAI’s enhanced UI makes it even easier for you to build your own flexible queries and quickly get to a comprehensive answer.

Leave a Reply

Your email address will not be published. Required fields are marked *