Audit the access of a space
Access auditing lets you find out which identities (users or service accounts) have access to the resources of a space, and which resources a given identity has access to. You can proceed via the Numspot API or via the space-permission-extractor tool.
Permissions
This action requires the following IAM (Identity and Access Management) permissions:
- iam.permission.get
- API
- GitHub
List the identities with access to a given resource
Returns the identities with access to a given resource of a space, along with their roles and permissions.
List the resources accessible to a given identity
Returns all the resources of a space that an identity has access to.
See the page on using the API for the implementation.
With a TUI (Terminal User Interface), the space-permission-extractor tool queries the IAM API to extract and consolidate the access of a Numspot space, in order to make it easier to audit.
See the project README ↗ for installation and usage.