IssueTracker

Problem you have encountered:

• Cloud providers Google Cloud , Amazon Web Services (AWS) and Microsoft Azure need to do better at helping Enterprises easily identify resources created by IAM principles.
• Not being able to easily pinpoint this can be security, lack of asset management and financial risks for companies.

What you expected to happen:

• A gcloud iam command should exist to allow auditing of compute resources created by an IAM principle
• I.E, a gcloud command which I can use to list resources, filtered with a specific IAM principle
• Imagine in this example, the IAM principle has been recently offboarded from the business and we require to cleanup their cloud estate

gcloud compute addresses list --filter=addressType:EXTERNAL --project=

Steps to reproduce:

• NA

Other information (workarounds you have tried, documentation consulted, etc):

• This is a script I built, specifically for GCP and seems the only method of tackling these problems, but is limited and carries caveats and dependencies.
• I cannot identify any native methods via any of the GCP documentation and also checked with my TAM, I believe this is because the IAM principle who created the resource is part of the resource metadata