Google Cloud Integration

Connect your Google Cloud Platform projects to Axura for comprehensive cloud security scanning and compliance monitoring.

6 min read

Updated: January 2026

GCP

Google Cloud

Security

IAM

Overview

The GCP integration scans your Google Cloud infrastructure for security misconfigurations and compliance gaps using a service account with read-only permissions.

Scanned Services

IAM

Roles, bindings, service accounts

Cloud Storage

Bucket configurations, access policies

Compute Engine

VM instances, firewall rules

Cloud SQL

Database encryption, access settings

Cloud Logging

Audit log configurations

Secret Manager

Secret access policies

VPC

Network configurations, firewall rules

Setup Instructions

Create Service Account

Create a service account in your GCP project for Axura to use.

gcloud iam service-accounts create axura-scanner \
  --display-name="Axura Security Scanner"

Grant Viewer Role

Grant the Viewer role for read-only access.

gcloud projects add-iam-policy-binding YOUR_PROJECT_ID \
  --member="serviceAccount:axura-scanner@YOUR_PROJECT_ID.iam.gserviceaccount.com" \
  --role="roles/viewer"

Create Key and Upload

Create a JSON key and upload it to Axura.

gcloud iam service-accounts keys create axura-key.json \
  --iam-account=axura-scanner@YOUR_PROJECT_ID.iam.gserviceaccount.com

💡 Workload Identity Federation

For enhanced security, use Workload Identity Federation instead of service account keys.