gae-worm

Google App Engine Worm is Python based web application designed to expose GCP settings publicly and clone itself to other projects

This app was created as proof of concept for testing GCP IAM and answering questions:

Can GAE app clone itself to other repo using it's appspot.com service account?
Can one service account create keys for other service account?
Can service account list GCP resources, like other projects and/or service accounts?

Features

GAE Worm can:

list GCP resources to which GAE app has access:
- projects
- projects IAM
- service accounts
- enabled services
create service account keys for given service account
enable service for given project
deploy itself (from Google Cloud Storage bucket) using GAE Admin API

Install dependencies:

pip install -t lib -r requirements.txt

Run locally:

dev_appserver.py app.yaml

Name		Name	Last commit message	Last commit date
Latest commit History 3 Commits
templates		templates
.gitignore		.gitignore
LICENSE		LICENSE
README.md		README.md
app.yaml		app.yaml
appengine_config.py		appengine_config.py
copy_to_bucket.sh		copy_to_bucket.sh
main.py		main.py
requirements.txt		requirements.txt