|
Skip to main content
| https://docs.cloud.google.com/policy-intelligence/docs/overview#main-content |
|
| https://docs.cloud.google.com/ |
|
Documentation
| https://docs.cloud.google.com/docs |
|
Get Started with Google Cloud
| https://docs.cloud.google.com/docs/get-started |
|
Product List
| https://docs.cloud.google.com/docs/product-list |
|
Cloud Customer Care
| https://docs.cloud.google.com/support/docs |
|
Agent Platform
| https://docs.cloud.google.com/products/gemini-enterprise-agent-platform |
|
Apigee API Management
| https://docs.cloud.google.com/apigee |
|
BigQuery
| https://docs.cloud.google.com/bigquery |
|
Compute Engine
| https://docs.cloud.google.com/products/compute |
|
Cloud CDN
| https://docs.cloud.google.com/cdn |
|
Cloud Run
| https://docs.cloud.google.com/run |
|
Cloud Storage
| https://docs.cloud.google.com/storage |
|
Cloud SQL
| https://docs.cloud.google.com/sql |
|
Gemini Enterprise
| https://docs.cloud.google.com/gemini/enterprise/docs |
|
Google Kubernetes Engine
| https://docs.cloud.google.com/kubernetes-engine |
|
Looker
| https://docs.cloud.google.com/looker |
|
Access and resources management
| https://docs.cloud.google.com/docs/access-resources |
|
Costs and usage management
| https://docs.cloud.google.com/docs/costs-usage |
|
Infrastructure as code
| https://docs.cloud.google.com/docs/iac |
|
SDK, languages, frameworks, and tools
| https://docs.cloud.google.com/docs/devtools |
|
AI and ML
| https://docs.cloud.google.com/docs/ai-ml |
|
Application development
| https://docs.cloud.google.com/docs/application-development |
|
Application hosting
| https://docs.cloud.google.com/docs/application-hosting |
|
Compute
| https://docs.cloud.google.com/docs/compute-area |
|
Data analytics and pipelines
| https://docs.cloud.google.com/docs/data |
|
Databases
| https://docs.cloud.google.com/docs/databases |
|
Distributed, hybrid, and multicloud
| https://docs.cloud.google.com/docs/dhm-cloud |
|
Industry solutions
| https://docs.cloud.google.com/docs/industry |
|
Migration
| https://docs.cloud.google.com/docs/migration |
|
Networking
| https://docs.cloud.google.com/docs/networking |
|
Observability and monitoring
| https://docs.cloud.google.com/docs/observability |
|
Security
| https://docs.cloud.google.com/docs/security |
|
Storage
| https://docs.cloud.google.com/docs/storage |
|
Console
| https://console.cloud.google.com/ |
|
| https://docs.cloud.google.com/policy-intelligence/docs |
|
Policy Intelligence
| https://docs.cloud.google.com/policy-intelligence/docs |
| Start free | https://console.cloud.google.com/freetrial |
|
Overview
| https://docs.cloud.google.com/policy-intelligence/docs |
|
Guides
| https://docs.cloud.google.com/policy-intelligence/docs/overview |
|
Reference
| https://docs.cloud.google.com/policy-intelligence/docs/apis |
|
Resources
| https://docs.cloud.google.com/policy-intelligence/docs/resources |
|
| https://docs.cloud.google.com/ |
|
Documentation
| https://docs.cloud.google.com/docs |
|
Overview
| https://docs.cloud.google.com/policy-intelligence/docs |
|
Guides
| https://docs.cloud.google.com/policy-intelligence/docs/overview |
|
Reference
| https://docs.cloud.google.com/policy-intelligence/docs/apis |
|
Resources
| https://docs.cloud.google.com/policy-intelligence/docs/resources |
|
Console
| https://console.cloud.google.com/ |
| Product overview | https://docs.cloud.google.com/policy-intelligence/docs/overview |
| Policy Analyzer for allow policies | https://docs.cloud.google.com/policy-intelligence/docs/policy-analyzer-overview |
| Analyze allow policies | https://docs.cloud.google.com/policy-intelligence/docs/analyze-iam-policies |
| Analyze organization policies | https://docs.cloud.google.com/policy-intelligence/docs/analyze-organization-policies |
| Manage saved queries | https://docs.cloud.google.com/policy-intelligence/docs/policy-analyzer-saved-queries |
| Write policy analysis to BigQuery | https://docs.cloud.google.com/policy-intelligence/docs/policy-analyzer-write-to-bigquery |
| Write policy analysis to Cloud Storage | https://docs.cloud.google.com/policy-intelligence/docs/policy-analyzer-write-to-gcs |
| Access-related troubleshooters | https://docs.cloud.google.com/policy-intelligence/docs/access-troubleshooters |
| Troubleshoot IAM permissions | https://docs.cloud.google.com/policy-intelligence/docs/troubleshoot-access |
| Remediate access issues | https://docs.cloud.google.com/policy-intelligence/docs/remediate-requests |
| Tools to understand service account usage | https://docs.cloud.google.com/policy-intelligence/docs/service-account-usage-tools |
| View recent usage for service accounts and keys | https://docs.cloud.google.com/policy-intelligence/docs/activity-analyzer-service-account-authentication |
| Find unused service accounts | https://docs.cloud.google.com/policy-intelligence/docs/service-account-insights |
| Find service accounts with lateral movement permissions | https://docs.cloud.google.com/policy-intelligence/docs/lateral-movement-insights |
| Role recommendations overview | https://docs.cloud.google.com/policy-intelligence/docs/role-recommendations-overview |
| Role recommendations best practices | https://docs.cloud.google.com/policy-intelligence/docs/role-recommendations-best-practices |
| Configure role recommendation generation | https://docs.cloud.google.com/policy-intelligence/docs/configure-role-recommendations |
| Projects, folders, and organizations | https://docs.cloud.google.com/policy-intelligence/docs/review-apply-role-recommendations |
| Cloud Storage buckets | https://docs.cloud.google.com/policy-intelligence/docs/review-apply-role-recommendations-buckets |
| BigQuery datasets | https://docs.cloud.google.com/policy-intelligence/docs/review-apply-role-recommendations-datasets |
| Projects, folders, and organizations | https://docs.cloud.google.com/policy-intelligence/docs/policy-insights |
| Cloud Storage buckets | https://docs.cloud.google.com/policy-intelligence/docs/policy-insights-buckets |
| BigQuery datasets | https://docs.cloud.google.com/policy-intelligence/docs/policy-insights-datasets |
| Export recommendations to BigQuery | https://docs.cloud.google.com/policy-intelligence/docs/export-recommendations |
| Export data for role recommendations | https://docs.cloud.google.com/policy-intelligence/docs/export-role-recommendations-data |
| Review and manage identity risks | https://docs.cloud.google.com/policy-intelligence/docs/manage-identity-risks |
| Organization policy recommendations overview | https://docs.cloud.google.com/policy-intelligence/docs/organization-policy-recommendations-overview |
| Review and apply organization policy recommendations | https://docs.cloud.google.com/policy-intelligence/docs/review-apply-organization-policy-recommendations |
| Review organization policy insights | https://docs.cloud.google.com/policy-intelligence/docs/organization-policy-insights |
| Policy Simulator for allow policies | https://docs.cloud.google.com/policy-intelligence/docs/iam-simulator-overview |
| Test role changes with Policy Simulator | https://docs.cloud.google.com/policy-intelligence/docs/simulate-iam-policies |
| Policy simulator for deny policies | https://docs.cloud.google.com/policy-intelligence/docs/deny-simulator-overview |
| Test deny policy changes with Policy Simulator | https://docs.cloud.google.com/policy-intelligence/docs/simulate-deny-policies |
| Policy simulator for Principal Access Boundary policies | https://docs.cloud.google.com/policy-intelligence/docs/pab-simulator-overview |
| Test Principal Access Boundary policy changes with Policy Simulator | https://docs.cloud.google.com/policy-intelligence/docs/simulate-pab-policies |
| Test organization policy changes with Policy Simulator | https://docs.cloud.google.com/policy-intelligence/docs/test-organization-policies |
| Audit logging for Policy Simulator | https://docs.cloud.google.com/policy-intelligence/docs/audit-logging/simulator-audit-logging |
| Audit logging for Policy Analyzer | https://docs.cloud.google.com/policy-intelligence/docs/audit-logging/policyanalyzer-audit-logging |
|
Get Started with Google Cloud
| https://docs.cloud.google.com/docs/get-started |
|
Product List
| https://docs.cloud.google.com/docs/product-list |
|
Cloud Customer Care
| https://docs.cloud.google.com/support/docs |
|
Agent Platform
| https://docs.cloud.google.com/products/gemini-enterprise-agent-platform |
|
Apigee API Management
| https://docs.cloud.google.com/apigee |
|
BigQuery
| https://docs.cloud.google.com/bigquery |
|
Compute Engine
| https://docs.cloud.google.com/products/compute |
|
Cloud CDN
| https://docs.cloud.google.com/cdn |
|
Cloud Run
| https://docs.cloud.google.com/run |
|
Cloud Storage
| https://docs.cloud.google.com/storage |
|
Cloud SQL
| https://docs.cloud.google.com/sql |
|
Gemini Enterprise
| https://docs.cloud.google.com/gemini/enterprise/docs |
|
Google Kubernetes Engine
| https://docs.cloud.google.com/kubernetes-engine |
|
Looker
| https://docs.cloud.google.com/looker |
|
Access and resources management
| https://docs.cloud.google.com/docs/access-resources |
|
Costs and usage management
| https://docs.cloud.google.com/docs/costs-usage |
|
Infrastructure as code
| https://docs.cloud.google.com/docs/iac |
|
SDK, languages, frameworks, and tools
| https://docs.cloud.google.com/docs/devtools |
|
AI and ML
| https://docs.cloud.google.com/docs/ai-ml |
|
Application development
| https://docs.cloud.google.com/docs/application-development |
|
Application hosting
| https://docs.cloud.google.com/docs/application-hosting |
|
Compute
| https://docs.cloud.google.com/docs/compute-area |
|
Data analytics and pipelines
| https://docs.cloud.google.com/docs/data |
|
Databases
| https://docs.cloud.google.com/docs/databases |
|
Distributed, hybrid, and multicloud
| https://docs.cloud.google.com/docs/dhm-cloud |
|
Industry solutions
| https://docs.cloud.google.com/docs/industry |
|
Migration
| https://docs.cloud.google.com/docs/migration |
|
Networking
| https://docs.cloud.google.com/docs/networking |
|
Observability and monitoring
| https://docs.cloud.google.com/docs/observability |
|
Security
| https://docs.cloud.google.com/docs/security |
|
Storage
| https://docs.cloud.google.com/docs/storage |
|
Home
| https://docs.cloud.google.com/ |
|
Documentation
| https://docs.cloud.google.com/docs |
|
Security
| https://docs.cloud.google.com/docs/security |
|
Policy Intelligence
| https://docs.cloud.google.com/policy-intelligence/docs |
|
Guides
| https://docs.cloud.google.com/policy-intelligence/docs/overview |
| IAM allow policies | https://docs.cloud.google.com/iam/docs/policies |
| Policy Analyzer overview | https://docs.cloud.google.com/policy-intelligence/docs/policy-analyzer-overview |
| Analyzing IAM policies | https://docs.cloud.google.com/asset-inventory/docs/analyzing-iam-policy |
| Service Specific
Terms | https://docs.cloud.google.com/terms/service-terms#1 |
| launch stage descriptions | https://cloud.google.com/products/#product-launch-stages |
| Analyze existing organization policies | https://docs.cloud.google.com/policy-intelligence/docs/analyze-organization-policies |
| Access-related
troubleshooters | https://docs.cloud.google.com/policy-intelligence/docs/access-troubleshooters |
| Service accounts | https://docs.cloud.google.com/iam/docs/service-accounts |
| View recent usage for service accounts and
keys | https://docs.cloud.google.com/policy-intelligence/docs/activity-analyzer-service-account-authentication |
| insight | https://docs.cloud.google.com/recommender/docs/insights/using-insights |
| Find unused service accounts | https://docs.cloud.google.com/policy-intelligence/docs/service-account-insights |
| insight | https://docs.cloud.google.com/recommender/docs/insights/using-insights |
| How
lateral movement insights are generated | https://docs.cloud.google.com/policy-intelligence/docs/role-recommendations-overview#lateral-movement-insights |
| Identify service accounts with
lateral movement permissions | https://docs.cloud.google.com/policy-intelligence/docs/lateral-movement-insights |
| role
recommendations | https://docs.cloud.google.com/policy-intelligence/docs/overview#improve |
| IAM allow policies | https://docs.cloud.google.com/iam/docs/policies |
| IAM role | https://docs.cloud.google.com/iam/docs/overview#roles |
| Enforce least privilege with role recommendations | https://docs.cloud.google.com/policy-intelligence/docs/role-recommendations-overview |
| Review and apply role recommendations for projects, folders, and
organizations | https://docs.cloud.google.com/policy-intelligence/docs/review-apply-role-recommendations |
| Review and apply role recommendations for Cloud Storage
buckets | https://docs.cloud.google.com/policy-intelligence/docs/review-apply-role-recommendations-buckets |
| Review and apply role recommendations for BigQuery
datasets | https://docs.cloud.google.com/policy-intelligence/docs/review-apply-role-recommendations-datasets |
| change risk
recommendations | https://docs.cloud.google.com/recommender/docs/change-risk-recommendations |
| Policy Simulator for allow policies | https://docs.cloud.google.com/policy-intelligence/docs/iam-simulator-overview |
| Policy Simulator for deny policies | https://docs.cloud.google.com/policy-intelligence/docs/deny-simulator-overview |
| Policy Simulator for Principal Access Boundary policies | https://docs.cloud.google.com/policy-intelligence/docs/pab-simulator-overview |
| Test organization policy changes with Policy
Simulator | https://docs.cloud.google.com/policy-intelligence/docs/test-organization-policies |
| Creative Commons Attribution 4.0 License | https://creativecommons.org/licenses/by/4.0/ |
| Apache 2.0 License | https://www.apache.org/licenses/LICENSE-2.0 |
| Google Developers Site Policies | https://developers.google.com/site-policies |
|
See all products
| https://cloud.google.com/products/ |
|
Google Cloud pricing
| https://cloud.google.com/pricing/ |
|
Google Cloud Marketplace
| https://cloud.google.com/marketplace/ |
|
Contact sales
| https://cloud.google.com/contact/ |
|
Community forums
| https://discuss.google.dev/c/google-cloud/14/ |
|
Support
| https://cloud.google.com/support-hub/ |
|
Release Notes
| https://docs.cloud.google.com/release-notes |
|
System status
| https://status.cloud.google.com |
|
GitHub
| https://github.com/googlecloudPlatform/ |
|
Getting Started with Google Cloud
| https://docs.cloud.google.com/docs/get-started/ |
|
Code samples
| https://docs.cloud.google.com/docs/samples |
|
Cloud Architecture Center
| https://docs.cloud.google.com/architecture/ |
|
Training and Certification
| https://cloud.google.com/learn/training/ |
|
Builders Hub
| https://me.developers.google.com/ |
|
Blog
| https://cloud.google.com/blog/ |
|
Events
| https://cloud.google.com/events/ |
|
X (Twitter)
| https://x.com/googlecloud |
|
Google Cloud on YouTube
| https://www.youtube.com/googlecloud |
|
Google Cloud Tech on YouTube
| https://www.youtube.com/googlecloudplatform |
|
| https://developers.google.com/ |
|
Android
| https://developer.android.com/ |
|
Chrome
| https://developer.chrome.com/ |
|
Firebase
| https://firebase.google.com/ |
|
Google AI
| https://ai.google.com/ |
|
About Google
| https://about.google/ |
|
Privacy
| https://policies.google.com/privacy |
|
Site terms
| https://policies.google.com/terms?hl=en |
|
Google Cloud terms
| https://cloud.google.com/product-terms |
|
Manage cookies
| https://docs.cloud.google.com/policy-intelligence/docs/overview |
|
Our third decade of climate action: join us
| https://cloud.google.com/sustainability |
|
Subscribe
| https://cloud.google.com/newsletter/ |