Manages multiple IAM roles for resources on Google Cloud

Deploys Vault on Compute Engine

Generates a bastion host VM compatible with OS Login and IAP Tunneling that can be used to access internal VMs

Creates one or more service accounts and grants them basic roles

Builds a secure CI/CD pipeline on Google Cloud

Manages Google Cloud organization policies

Opinionated setup for securely using AI Platform Notebooks.

Allows managing a keyring, zero or more keys in the keyring, and IAM role bindings on individual keys

Creates one or more Google Secret Manager secrets and manages basic permissions for them

Creates self-hosted Terraform Cloud Agent on Google Cloud

Create and manage Google Cloud Tags

Deploys a Cloud IDS instance and associated resources.

Deploys a secured data warehouse variant for ingesting encrypted data from on-prem sources

Create and manage Secure Web Proxy on GCP for secured egress web traffic

Deploy Privileged Access Manager