Painting a Picture of Your Infrastructure in Minutes
Jun 1, 2019Carly Schneider, Fredrik Gustafsson
Summary
This post details the initial development of a system for creating an up-to-date infrastructure inventory by scraping Google Cloud APIs and processing the data into a graph database (Neo4j). It highlights the use of Google Cloud Asset Inventory for data acquisition and the Cypher query language for querying the graph. The goal is to provide security responders with a quick and comprehensive view of the infrastructure during incidents.
More from the Vulnerability Management Platform trail
- Spotify’s Vulnerability Management Platform
- How We Maintain Security Testing within the Software Development Life Cycle
- Techbytes: Scalable User Privacy – Crypto Shredding at Spotify
- Reflections on the Last Two Years of Spotify’s Bug Bounty Program
- Releasing Gimme: Managing time bound IAM conditions in Google Cloud Platform