Wave 12 · Multi-Cloud Security & Cost Operations GCP / IAM / Policy Diff proof Synthetic snapshots + binding drift exports

GCP IAM bindings, org-policy drift, and snapshot freshness that stay operator-readable.

This control plane turns raw Google Cloud IAM snapshots into a buyer-readable drift surface: public bindings, privileged roles, org-policy mismatches, stale baselines, and the remediation packet needed before audits, launches, or partner access windows drift.

Overview Policy Lane Binding Risks Drift Posture Verification Docs

Docs

routes · cli · api

routes

Public control surface

/, /policy-lane, /binding-risks, /drift-posture, /verification, /docs

api

Structured payloads

/api/dashboard/summary, /api/policy-lane, /api/binding-risks, /api/drift-posture, /api/verification, /api/sample

cli

Offline policy diff analysis

npx gcp-iam-policy-diff fixtures/gcp-policy-diff-clean.json --format summary renders the same drift posture the dashboard exposes.