Google Cloud Security Toolbox

This post details the open-sourcing of two internal Spotify tools: GCP-Audit and GCP-Firewall-Enforcer. GCP-Audit scans Google Cloud projects for common security issues (e.g., inadequate storage bucket permissions, exposed Compute Engine instances, misconfigured CloudSQL) using an expandable rules repository. GCP-Firewall-Enforcer continuously enforces an audited set of firewall rules across multiple projects, automatically detecting and fixing accidental alterations to mitigate risks and maintain control of firewall policies.