Hacker News new | ask | show | jobs
by diocles 1658 days ago
For GCP you can enumerate and graph the publicly visible dependencies as per this blog post:

https://binx.io/blog/2020/10/03/how-to-find-google-cloud-pla...

However, that does not take account of GCP services being implemented behind the scenes using other GCP technologies in Google-managed projects - e.g. Cloud SQL uses Compute Engine and GCR (search "speckle umbrella"). Cloud Functions relies on Cloud Build to compile the function into a container. AI Platform Training uses a GKE cluster internally.

You can often get hints about these things from the VPC-SC documentation, which explains on a per-service basis which APIs need to be enabled to protect the perimeter:

https://cloud.google.com/vpc-service-controls/docs/supported...