|
Skip to main content
| https://cloud.google.com/iam/docs/recommender-overview#main-content |
|
| https://cloud.google.com/ |
|
Documentation
| https://docs.cloud.google.com/docs |
|
Get Started with Google Cloud
| https://docs.cloud.google.com/docs/get-started |
|
Product List
| https://docs.cloud.google.com/docs/product-list |
|
Cloud Customer Care
| https://docs.cloud.google.com/support/docs |
|
Agent Platform
| https://docs.cloud.google.com/products/gemini-enterprise-agent-platform |
|
Apigee API Management
| https://docs.cloud.google.com/apigee |
|
BigQuery
| https://docs.cloud.google.com/bigquery |
|
Compute Engine
| https://docs.cloud.google.com/products/compute |
|
Cloud CDN
| https://docs.cloud.google.com/cdn |
|
Cloud Run
| https://docs.cloud.google.com/run |
|
Cloud Storage
| https://docs.cloud.google.com/storage |
|
Cloud SQL
| https://docs.cloud.google.com/sql |
|
Gemini Enterprise
| https://docs.cloud.google.com/gemini/enterprise/docs |
|
Google Kubernetes Engine
| https://docs.cloud.google.com/kubernetes-engine |
|
Looker
| https://docs.cloud.google.com/looker |
|
Access and resources management
| https://docs.cloud.google.com/docs/access-resources |
|
Costs and usage management
| https://docs.cloud.google.com/docs/costs-usage |
|
Infrastructure as code
| https://docs.cloud.google.com/docs/iac |
|
SDK, languages, frameworks, and tools
| https://docs.cloud.google.com/docs/devtools |
|
AI and ML
| https://docs.cloud.google.com/docs/ai-ml |
|
Application development
| https://docs.cloud.google.com/docs/application-development |
|
Application hosting
| https://docs.cloud.google.com/docs/application-hosting |
|
Compute
| https://docs.cloud.google.com/docs/compute-area |
|
Data analytics and pipelines
| https://docs.cloud.google.com/docs/data |
|
Databases
| https://docs.cloud.google.com/docs/databases |
|
Distributed, hybrid, and multicloud
| https://docs.cloud.google.com/docs/dhm-cloud |
|
Industry solutions
| https://docs.cloud.google.com/docs/industry |
|
Migration
| https://docs.cloud.google.com/docs/migration |
|
Networking
| https://docs.cloud.google.com/docs/networking |
|
Observability and monitoring
| https://docs.cloud.google.com/docs/observability |
|
Security
| https://docs.cloud.google.com/docs/security |
|
Storage
| https://docs.cloud.google.com/docs/storage |
|
Console
| https://console.cloud.google.com/ |
|
| https://docs.cloud.google.com/policy-intelligence/docs |
|
Security
| https://docs.cloud.google.com/docs/security |
|
Policy Intelligence
| https://docs.cloud.google.com/policy-intelligence/docs |
| Start free | https://console.cloud.google.com/freetrial |
|
Overview
| https://docs.cloud.google.com/policy-intelligence/docs |
|
Guides
| https://docs.cloud.google.com/policy-intelligence/docs/overview |
|
Reference
| https://docs.cloud.google.com/policy-intelligence/docs/apis |
|
Resources
| https://docs.cloud.google.com/policy-intelligence/docs/resources |
|
| https://cloud.google.com/ |
|
Documentation
| https://cloud.google.com/docs |
|
Overview
| https://cloud.google.com/policy-intelligence/docs |
|
Guides
| https://cloud.google.com/policy-intelligence/docs/overview |
|
Reference
| https://cloud.google.com/policy-intelligence/docs/apis |
|
Resources
| https://cloud.google.com/policy-intelligence/docs/resources |
|
Console
| https://console.cloud.google.com/ |
| Product overview | https://cloud.google.com/policy-intelligence/docs/overview |
| Policy Analyzer for allow policies | https://cloud.google.com/policy-intelligence/docs/policy-analyzer-overview |
| Analyze allow policies | https://cloud.google.com/policy-intelligence/docs/analyze-iam-policies |
| Analyze organization policies | https://cloud.google.com/policy-intelligence/docs/analyze-organization-policies |
| Manage saved queries | https://cloud.google.com/policy-intelligence/docs/policy-analyzer-saved-queries |
| Write policy analysis to BigQuery | https://cloud.google.com/policy-intelligence/docs/policy-analyzer-write-to-bigquery |
| Write policy analysis to Cloud Storage | https://cloud.google.com/policy-intelligence/docs/policy-analyzer-write-to-gcs |
| Access-related troubleshooters | https://cloud.google.com/policy-intelligence/docs/access-troubleshooters |
| Troubleshoot IAM permissions | https://cloud.google.com/policy-intelligence/docs/troubleshoot-access |
| Remediate access issues | https://cloud.google.com/policy-intelligence/docs/remediate-requests |
| Tools to understand service account usage | https://cloud.google.com/policy-intelligence/docs/service-account-usage-tools |
| View recent usage for service accounts and keys | https://cloud.google.com/policy-intelligence/docs/activity-analyzer-service-account-authentication |
| Find unused service accounts | https://cloud.google.com/policy-intelligence/docs/service-account-insights |
| Find service accounts with lateral movement permissions | https://cloud.google.com/policy-intelligence/docs/lateral-movement-insights |
| Role recommendations overview | https://cloud.google.com/policy-intelligence/docs/role-recommendations-overview |
| Role recommendations best practices | https://cloud.google.com/policy-intelligence/docs/role-recommendations-best-practices |
| Configure role recommendation generation | https://cloud.google.com/policy-intelligence/docs/configure-role-recommendations |
| Projects, folders, and organizations | https://cloud.google.com/policy-intelligence/docs/review-apply-role-recommendations |
| Cloud Storage buckets | https://cloud.google.com/policy-intelligence/docs/review-apply-role-recommendations-buckets |
| BigQuery datasets | https://cloud.google.com/policy-intelligence/docs/review-apply-role-recommendations-datasets |
| Projects, folders, and organizations | https://cloud.google.com/policy-intelligence/docs/policy-insights |
| Cloud Storage buckets | https://cloud.google.com/policy-intelligence/docs/policy-insights-buckets |
| BigQuery datasets | https://cloud.google.com/policy-intelligence/docs/policy-insights-datasets |
| Export recommendations to BigQuery | https://cloud.google.com/policy-intelligence/docs/export-recommendations |
| Export data for role recommendations | https://cloud.google.com/policy-intelligence/docs/export-role-recommendations-data |
| Review and manage identity risks | https://cloud.google.com/policy-intelligence/docs/manage-identity-risks |
| Organization policy recommendations overview | https://cloud.google.com/policy-intelligence/docs/organization-policy-recommendations-overview |
| Review and apply organization policy recommendations | https://cloud.google.com/policy-intelligence/docs/review-apply-organization-policy-recommendations |
| Review organization policy insights | https://cloud.google.com/policy-intelligence/docs/organization-policy-insights |
| Policy Simulator for allow policies | https://cloud.google.com/policy-intelligence/docs/iam-simulator-overview |
| Test role changes with Policy Simulator | https://cloud.google.com/policy-intelligence/docs/simulate-iam-policies |
| Policy simulator for deny policies | https://cloud.google.com/policy-intelligence/docs/deny-simulator-overview |
| Test deny policy changes with Policy Simulator | https://cloud.google.com/policy-intelligence/docs/simulate-deny-policies |
| Policy simulator for Principal Access Boundary policies | https://cloud.google.com/policy-intelligence/docs/pab-simulator-overview |
| Test Principal Access Boundary policy changes with Policy Simulator | https://cloud.google.com/policy-intelligence/docs/simulate-pab-policies |
| Test organization policy changes with Policy Simulator | https://cloud.google.com/policy-intelligence/docs/test-organization-policies |
| Audit logging for Policy Simulator | https://cloud.google.com/policy-intelligence/docs/audit-logging/simulator-audit-logging |
| Audit logging for Policy Analyzer | https://cloud.google.com/policy-intelligence/docs/audit-logging/policyanalyzer-audit-logging |
|
Get Started with Google Cloud
| https://cloud.google.com/docs/get-started |
|
Product List
| https://cloud.google.com/docs/product-list |
|
Cloud Customer Care
| https://cloud.google.com/support/docs |
|
Agent Platform
| https://cloud.google.com/products/gemini-enterprise-agent-platform |
|
Apigee API Management
| https://cloud.google.com/apigee |
|
BigQuery
| https://cloud.google.com/bigquery |
|
Compute Engine
| https://cloud.google.com/products/compute |
|
Cloud CDN
| https://cloud.google.com/cdn |
|
Cloud Run
| https://cloud.google.com/run |
|
Cloud Storage
| https://cloud.google.com/storage |
|
Cloud SQL
| https://cloud.google.com/sql |
|
Gemini Enterprise
| https://cloud.google.com/gemini/enterprise/docs |
|
Google Kubernetes Engine
| https://cloud.google.com/kubernetes-engine |
|
Looker
| https://cloud.google.com/looker |
|
Access and resources management
| https://cloud.google.com/docs/access-resources |
|
Costs and usage management
| https://cloud.google.com/docs/costs-usage |
|
Infrastructure as code
| https://cloud.google.com/docs/iac |
|
SDK, languages, frameworks, and tools
| https://cloud.google.com/docs/devtools |
|
AI and ML
| https://cloud.google.com/docs/ai-ml |
|
Application development
| https://cloud.google.com/docs/application-development |
|
Application hosting
| https://cloud.google.com/docs/application-hosting |
|
Compute
| https://cloud.google.com/docs/compute-area |
|
Data analytics and pipelines
| https://cloud.google.com/docs/data |
|
Databases
| https://cloud.google.com/docs/databases |
|
Distributed, hybrid, and multicloud
| https://cloud.google.com/docs/dhm-cloud |
|
Industry solutions
| https://cloud.google.com/docs/industry |
|
Migration
| https://cloud.google.com/docs/migration |
|
Networking
| https://cloud.google.com/docs/networking |
|
Observability and monitoring
| https://cloud.google.com/docs/observability |
|
Security
| https://cloud.google.com/docs/security |
|
Storage
| https://cloud.google.com/docs/storage |
|
Home
| https://docs.cloud.google.com/ |
|
Documentation
| https://docs.cloud.google.com/docs |
|
Security
| https://docs.cloud.google.com/docs/security |
|
Policy Intelligence
| https://docs.cloud.google.com/policy-intelligence/docs |
|
Guides
| https://docs.cloud.google.com/policy-intelligence/docs/overview |
| Recommender | https://cloud.google.com/recommender/docs |
| How
lateral movement insights are generated | https://cloud.google.com/iam/docs/recommender-overview#lateral-movement-insights |
| roles.list method | https://cloud.google.com/iam/docs/reference/rest/v1/roles/list |
| Export data for role recommendations | https://cloud.google.com/policy-intelligence/docs/export-role-recommendations-data |
| Machine learning for policy insights | https://cloud.google.com/iam/docs/recommender-overview#ml |
| Availability | https://cloud.google.com/iam/docs/recommender-overview#availability |
| Manage policy insights for
projects, folders, and organizations | https://cloud.google.com/policy-intelligence/docs/policy-insights |
| Manage policy
insights for Cloud Storage buckets | https://cloud.google.com/policy-intelligence/docs/policy-insights-buckets |
| word embedding | https://developers.google.com/machine-learning/crash-course/embeddings/video-lecture |
| k-anonymity | https://cloud.google.com/sensitive-data-protection/docs/concepts-risk-analysis#about-k-anonymity |
| federated learning | https://federated.withgoogle.com/ |
| new custom role | https://cloud.google.com/iam/docs/recommender-overview#custom-roles |
| predefined roles | https://cloud.google.com/iam/docs/understanding-roles |
| recommendations for
service agents | https://cloud.google.com/iam/docs/recommender-overview#service-agents |
| access control lists (ACLs) | https://cloud.google.com/storage/docs/access-control/lists |
| role-based access
control (RBAC) | https://cloud.google.com/kubernetes-engine/docs/how-to/role-based-access-control |
| Availability | https://cloud.google.com/iam/docs/recommender-overview#availability |
| Configure role recommendation generation | https://cloud.google.com/policy-intelligence/docs/configure-role-recommendations |
| custom role | https://cloud.google.com/iam/docs/understanding-custom-roles |
| permissions change log | https://cloud.google.com/iam/docs/permissions-change-log |
| Manage lateral movement
insights | https://cloud.google.com/policy-intelligence/docs/lateral-movement-insights |
| Service Specific
Terms | https://cloud.google.com/terms/service-terms#1 |
| launch stage descriptions | https://cloud.google.com/products/#product-launch-stages |
| conditional role bindings | https://cloud.google.com/iam/docs/conditions-overview |
| Cloud Storage convenience values | https://cloud.google.com/storage/docs/access-control/iam#convenience-values |
| BigQuery special group membership | https://cloud.google.com/bigquery/docs/access-control-basic-roles |
| Reference
Kubernetes resources in IAM policies | https://cloud.google.com/kubernetes-engine/docs/concepts/workload-identity#kubernetes-resources-iam-policies |
| Principal identifiers | https://cloud.google.com/iam/docs/principal-identifiers |
| minimum observation
period | https://cloud.google.com/iam/docs/recommender-overview#observation-period |
| Configure
role recommendation generation | https://cloud.google.com/policy-intelligence/docs/configure-role-recommendations |
| service agent | https://cloud.google.com/iam/docs/service-account-types#service-agents |
| Role recommendations for service agents | https://cloud.google.com/iam/docs/recommender-overview#service-agents |
| custom role | https://cloud.google.com/iam/docs/understanding-custom-roles |
| service agent | https://cloud.google.com/iam/docs/service-account-types#service-agents |
| Role recommendations for service
agents | https://cloud.google.com/iam/docs/recommender-overview#service-agents |
| Review and apply role recommendations for projects, folders, and
organizations | https://cloud.google.com/policy-intelligence/docs/review-apply-role-recommendations |
| Review and apply role recommendations for Cloud Storage
buckets | https://cloud.google.com/policy-intelligence/docs/review-apply-role-recommendations-buckets |
| Review and apply role recommendations for BigQuery
datasets | https://cloud.google.com/policy-intelligence/docs/review-apply-role-recommendations-datasets |
| Remediate excessive permissions with Privileged Access Manager | https://cloud.google.com/iam/docs/pam-remediate-iam-recommendations |
| Preview | https://cloud.google.com/products#product-launch-stages |
| view these entries in your recommendations
history | https://cloud.google.com/policy-intelligence/docs/review-apply-role-recommendations#history |
| view them in your Google Cloud audit logs | https://cloud.google.com/recommender/docs/viewing-logs |
| Service Specific
Terms | https://cloud.google.com/terms/service-terms#1 |
| launch stage descriptions | https://cloud.google.com/products/#product-launch-stages |
| custom role | https://cloud.google.com/iam/docs/recommender-overview#custom-roles |
| Role recommendations for service agents | https://cloud.google.com/iam/docs/recommender-overview#service-agents |
| Role recommendations for service agents | https://cloud.google.com/iam/docs/recommender-overview#service-agents |
| service agents | https://cloud.google.com/iam/docs/service-account-types#service-agents |
| basic
roles | https://cloud.google.com/iam/docs/roles-overview#basic |
| service agent
role | https://cloud.google.com/iam/docs/service-account-types#roles |
| IAM recommender | https://cloud.google.com/security-command-center/docs/concepts-security-sources#iamrec-source |
| the Premium or Enterprise tier of Security Command Center | https://cloud.google.com/security-command-center/pricing#security-command-center-pricing |
| Billing questions | https://cloud.google.com/policy-intelligence/docs/billing-questions |
| get the associated policy
insight | https://cloud.google.com/policy-intelligence/docs/policy-insights |
| get the associated policy
insight | https://cloud.google.com/policy-intelligence/docs/policy-insights |
| machine learning | https://cloud.google.com/iam/docs/recommender-overview#ml |
| Review policy insights for projects, folders, and organizations | https://cloud.google.com/policy-intelligence/docs/policy-insights |
| Review policy insights for Cloud Storage buckets | https://cloud.google.com/policy-intelligence/docs/policy-insights-buckets |
| Review policy insights for BigQuery datasets | https://cloud.google.com/policy-intelligence/docs/policy-insights-datasets |
| Review policy insights for projects, folders, and organizations | https://cloud.google.com/policy-intelligence/docs/policy-insights |
| Review policy insights for Cloud Storage buckets | https://cloud.google.com/policy-intelligence/docs/policy-insights-buckets |
| Review policy insights for BigQuery datasets | https://cloud.google.com/policy-intelligence/docs/policy-insights-datasets |
| best practices for using role recommendations | https://cloud.google.com/policy-intelligence/docs/role-recommendations-best-practices |
| Review and apply role recommendations for projects, folders, and
organizations | https://cloud.google.com/policy-intelligence/docs/review-apply-role-recommendations |
| Review and apply your role recommendations for Cloud Storage
buckets | https://cloud.google.com/policy-intelligence/docs/review-apply-role-recommendations-buckets |
| Review and apply your role recommendations for BigQuery
datasets | https://cloud.google.com/policy-intelligence/docs/review-apply-role-recommendations-datasets |
| Recommender | https://cloud.google.com/recommender/docs/overview |
| predefined roles | https://cloud.google.com/iam/docs/understanding-roles |
| custom roles | https://cloud.google.com/iam/docs/understanding-custom-roles |
| Creative Commons Attribution 4.0 License | https://creativecommons.org/licenses/by/4.0/ |
| Apache 2.0 License | https://www.apache.org/licenses/LICENSE-2.0 |
| Google Developers Site Policies | https://developers.google.com/site-policies |
|
See all products
| https://cloud.google.com/products/ |
|
Google Cloud pricing
| https://cloud.google.com/pricing/ |
|
Google Cloud Marketplace
| https://cloud.google.com/marketplace/ |
|
Contact sales
| https://cloud.google.com/contact/ |
|
Community forums
| https://discuss.google.dev/c/google-cloud/14/ |
|
Support
| https://cloud.google.com/support-hub/ |
|
Release Notes
| https://docs.cloud.google.com/release-notes |
|
System status
| https://status.cloud.google.com |
|
GitHub
| https://github.com/googlecloudPlatform/ |
|
Getting Started with Google Cloud
| https://cloud.google.com/docs/get-started/ |
|
Code samples
| https://cloud.google.com/docs/samples |
|
Cloud Architecture Center
| https://cloud.google.com/architecture/ |
|
Training and Certification
| https://cloud.google.com/learn/training/ |
|
Builders Hub
| https://me.developers.google.com/ |
|
Blog
| https://cloud.google.com/blog/ |
|
Events
| https://cloud.google.com/events/ |
|
X (Twitter)
| https://x.com/googlecloud |
|
Google Cloud on YouTube
| https://www.youtube.com/googlecloud |
|
Google Cloud Tech on YouTube
| https://www.youtube.com/googlecloudplatform |
|
| https://developers.google.com/ |
|
Android
| https://developer.android.com/ |
|
Chrome
| https://developer.chrome.com/ |
|
Firebase
| https://firebase.google.com/ |
|
Google AI
| https://ai.google.com/ |
|
About Google
| https://about.google/ |
|
Privacy
| https://policies.google.com/privacy |
|
Site terms
| https://policies.google.com/terms?hl=en |
|
Google Cloud terms
| https://cloud.google.com/product-terms |
|
Manage cookies
| https://cloud.google.com/iam/docs/recommender-overview |
|
Our third decade of climate action: join us
| https://cloud.google.com/sustainability |
|
Subscribe
| https://cloud.google.com/newsletter/ |