iam checks + storage checks

modules/gcp/gcp_recon.py

@@ -6,7 +6,7 @@ that have functions that done have arguments if we can access them :-)
 
 
 from libs.gcp.gcp_iam import *
-#from libs.gcp.gcp_storage import *
+from libs.gcp.gcp_storage import *
 
 credentials = service_account.Credentials.from_service_account_file(
     filename=os.environ['GOOGLE_APPLICATION_CREDENTIALS'],
@@ -21,10 +21,24 @@ def module_gcp_recon_all():
     python3 weirdAAL.py -m gcp_recon_all -t demo
     '''
     try:
-        print("IAM List Keys check")
-        #print(credentials)
+        print("GCP IAM List Keys check")
+        # print(credentials)
         gcp_iam_list_keys(credentials.service_account_email, service)
-        #list_service_accounts('best-indian-restaurant-691ad')
+    except HttpError as e:
+        # print(e)
+        if e.resp.status in [403, 500, 503]:
+            print("\tGCP IAM access denied for {}".format(credentials.service_account_email))
+        else:
+            print(e)
+    except google.auth.exceptions.RefreshError as f:
+        print(f)
+        print("Service key is invalid exiting")
+        sys.exit()
+
+    try:
+        print("GCP IAM list service accounts for the current project: {}.".format(credentials.project_id))
+        # print(credentials)
+        gcp_iam_list_service_accounts(credentials.project_id, service)
     except HttpError as e:
         # print(e)
         if e.resp.status in [403, 500, 503]:
@@ -36,3 +50,23 @@ def module_gcp_recon_all():
         print("Service key is invalid exiting")
         sys.exit()
 
+    '''
+    Storage bucket access checks
+    '''
+    try:
+        print("Checking for storage buckets")
+        buckets = gcp_storage_list_buckets(credentials)
+        if buckets:
+            print("\nAttempting to list bucket contents")
+            for a in buckets:
+                print(a)
+                gcp_storage_list_blobs(credentials, a)
+    except googleapiclient.errors.HttpError as e:
+        print(e)
+    except exceptions.Forbidden as e:
+            print("Forbidden")
+            print(e)
+    except exceptions.PermissionDenied as e:
+            print("PermissionDenied")
+    except google.auth.exceptions.RefreshError as f:
+        print(f)