Resources

How to onboard a GCP account to Kloudle

This document details the steps that are required to create a Google Cloud service account token to be onboarded to Kloudle so that Kloudle can make API requests to Google Cloud.

How to onboard a GCP account to Kloudle
Riyaz Walikar
May 10, 2022

Table of Contents

What is Kloudle?

What is this document about?

GCP Onboarding steps for Kloudle

     Through the UI

          Creating a new service account

          Obtaining JSON key for Service Account

What is Kloudle?

Kloudle is a Digital Assets Security Automation Platform for SREs and DevOps. When integrated with your Cloud or SaaS provider, Kloudle takes periodic security snapshots and provides complete security contextual visibility that allows you to make informed decisions about your infrastructure, the assets and their various configurations.

Kloudle collects metadata about the resources and analyzes them to identify misconfigurations and using a massive research powered knowledgebase, identifies what would go wrong if these misconfigurations were exploited and what you can do to fix them.

As part of making sure the lives of SREs and DevOps become easier, Kloudle offers the ability to create “rules” that allow a user to take automated actions against a baseline. These automated actions, which we call Security Processes, allow users to configure a series of steps that kick in when custom events occur to ensure the security of the cloud and SaaS platform being monitored.

What is this document about?

This document details the steps that are required to create a Google Cloud service account token to be onboarded to Kloudle so that Kloudle can make API requests to Google Cloud.

GCP Onboarding steps for Kloudle

Through the UI

Creating a new service account

  1. Create a new service account within your GCP project by using the following URL: https://console.cloud.google.com/iam-admin/serviceaccounts/create

  1. Use the name “kloudle-sa” and service account ID as “kloudle-sa”

Create Service Account

  1. Click on “Create and Continue”

  1. Select the Basic > Viewer permission for the role
Select the Basic > Viewer permission for the role

  1. Also add “Pub/Sub Admin” and “Composer Administrator” permissions

  1. Do not provide any information in the “Grant users access to this service account” input fields.

  1. Click on “Done” to create the new services account.

Obtaining JSON key for Service Account

  1. Navigate to https://console.cloud.google.com/iam-admin/serviceaccounts and select the newly created account.

  1. Click on the Keys tab

Keys

  1. Click on the “ADD KEY” button and click on “Create new key”.

Create New Key

  1. Select Key Type JSON (default). When the create button is clicked, a JSON is created which needs to be shared with the Kloudle Team over a secure channel.

***

If you wish to learn how to onboard an AWS account to Kloudle, this document details the steps that are required to create an AWS user that will be onboarded to Kloudle so that Kloudle can make API requests to AWS.

How to onboard a GCP account to Kloudle
ABOUT THE AUTHOR

Riyaz Walikar

Riyaz is a security evangelist, offensive security expert and researcher with over a decade of experience in the cyber security industry. His passion to break into some of the most well defended networks and systems in his career spanning 15 years has earned him a lot respect within the security industry. He has led Security Assessment and Penetration Testing teams at Pricewaterhouse Coopers (PwC) and Appsecco, and the Product Security Team at Citrix before co-founding Kloudle. Riyaz now specializes in cloud native, container and cloud security in general, helping build an easy to use security management platform to help companies enhance their visibility in the cloud, identify security misconfigurations and automate remediation for security gaps enabling compliance and operational security in multi-cloud environments. He is also an avid speaker and trainer and presents his research and findings at security conferences and community meetups around the world including BlackHat USA, BH Europe, BH Asia, nullcon and OWASP AppsecUSA.Specialties: Cloud (AWS, GCP, Azure, IBM, Others) Security, Cloud-Native Security, Kubernetes, Container Security, Web Application Security, Network and System Penetration Testing, Wireless Network Security, Malware Analysis and Reverse Engineering, Threat Modelling, Windows Forensics, Security Code Review, Vulnerability Research, Exploit Development and Reverse Engineering. Certifications: CKA, CKAD, OSCP

Enjoyed this read?

Subscribe to our newsletter and stay ahead with more great insights and resources on cloud security!

Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.