gae-worm

Google App Engine Worm is Python based web application designed to expose GCP settings publicly and clone itself to other projects

This app was created as proof of concept for testing GCP IAM and answering questions:

Can GAE app clone itself to other repo using it's appspot.com service account?
Can one service account create keys for other service account?
Can service account list GCP resources, like other projects and/or service accounts?

Features

GAE Worm can:

list GCP resources to which GAE app has access:
- projects
- projects IAM
- service accounts
- enabled services
create service account keys for given service account
enable service for given project
deploy itself (from Google Cloud Storage bucket) using GAE Admin API

Install dependencies:

pip install -t lib -r requirements.txt

Run locally:

dev_appserver.py app.yaml