Troubleshooting and FAQ

Troubleshooting and FAQ

gcpwn command not found

Run with module entrypoint:

python -m gcpwn

If installed via pip, confirm the Python environment and PATH.

Table output not working

Install optional table dependency:

pip install prettytable==3.17.0

Then:

configs set std_output_format table

Excel export fails

Install optional dependency:

pip install xlsxwriter==3.2.9

Then rerun:

data export excel

enum_gcp_cloud_hound_data says IAM policy data is missing

Run IAM policy collection first:

modules run enum_policy_bindings --ensure-tree

OpenGraph warns that rules are skipped

Cause: required permissions in a rule are not in gcpwn/mappings/og_permission_to_roles_map.json.

Fix:

1. Add missing permissions to your permission-role mapping workflow input.
2. Rebuild/update og_permission_to_roles_map.json.
3. Re-run OpenGraph.

See OpenGraph - Add Your Own Content.

Why are my conditional IAM expressions not strictly evaluated?

Current conditionals engine is placeholder-aware:

• condition metadata is preserved and propagated
• strict CEL narrowing/evaluation is not fully implemented yet

Use condition fields as context, not a guaranteed deny/allow evaluator.

analyze_vulns does not produce findings

Current module is scaffolded. Use:

• process_iam_bindings
• OpenGraph output + BloodHound queries

for practical analysis workflows today.