Scanning a list GCP projects and combining results into a single report
Spiroman opened this issue · comments
Is your feature request related to a problem? Please describe.
In the case that I would need to scan 20 out of lets say 100 projects, I wouldn't want to run the scanner on all 100, and at the same time I wouldn't want to have 20 individual reports. Ideally, I'd have 1 report that that contains information about 20 different projects.
Describe the solution you'd like
A way to pass a list of project ids to be scanned using some flag or another. I.g. allow the --project-id flag to accept a list of projects
Describe alternatives you've considered
Giving all the necesasry permissions to a SA in specific projects instead of defining it on the org level. This alternative could work for a small number of projects in an organization, but if you'd want to scan 100 out of 1000, this is not feasiable.
Additional context
There was a similar issue that was borught up some years ago, but in the end, the changes to the scanning logic do not provide a solution for this.
Please correct me if I'm wrong, but I don't see a way to scan a list of specific projects, under different folders, using a single service account, without granting the SA permissions on each project individually (for large amount of projects, unsustaiable).