Risk Level: Medium
Description
This plugin decides whether the quantity of assets is near the per-account limit. Google limits records to specific quantities of assets. Surpassing those cutoff points could keep assets from sending off.
Configuration Parameters
Service Limit Percentage Fail: This parameter denotes the maximum allowed percentage of utilized resources. An alert is generated if the utilized percentage exceeds this limit.
By default, the limit is set to 90. Therefore, an issue will be created if the utilization of all the resources combined is more than 90%.
About the Service
Google Cloud IAM:
IAM, which is an acronym for Identity and Access Management, is the Google Cloud policy. This policy is responsible for specifying access controls for Google Cloud resources. Basically, IAM allows heads to approve who can make a move on explicit assets, giving you full control and permeability to oversee Google Cloud assets halfway. For undertakings with complex hierarchical designs, many workgroups, and many activities, IAM gives a bound together view into security strategy across your whole association, with worked in evaluating to ease consistency processes. For more information, click here.
Impact
The number of projects any user or service account can create is limited. If you create a project outside an organization, the quota on your account is used. If you are creating a project within an organization, the quota on both your account and organization are checked, and if either one has a quota remaining, the project can be created. Once your quota is reached, you can request an increase. If you have less than 30 projects remaining in your quota, you can see the number of projects you have remaining in your quota on the New Project page. For more information, see Managing project quotas. This plugin determines if the number of resources is close to the per-account limit. Google limits account to certain numbers of resources. Exceeding those limits could prevent resources from launching.
Steps To Reproduce
Using GCP Console-
In order to ensure that, the number of resources is close to the per-account limit, follow the steps given below:
- Firstly, use the administrator account for signing up to Google Cloud Platform Console.
- Now, from the top navigation bar, select the GCP Project you want to investigate in.
- From the Navigation Menu on the left, you may find IAM & Admin section under All Products Section, click on it.
- Under IAM & Admin section, click on the Quotas nav link. Thence, a new Quotas Page will appear on the screen.
- You will find the list of services with their usage percentage listed down.
- At the top, you will find a row with Near the limit, Low usage, All quotas columns in it. Now, click on the View quotas link under the Near the limit option.
- A new list will appear on the screen, with a filter of Current usage percentage: >(greater than the configured limit)%.
- If it shows, No quotas are available, that means no quotas are close enough to the per-account limit.
- Repeat the steps mentioned above for reviewing accounts in other folders/projects associated with other GCP organizations deployed within your record.
Steps For Remediation
Using GCP Console-
In order to reconfigure the settings to contact GCP support to increase the number of resources available", follow the below-mentioned steps:
- Firstly, use the administrator account for signing up to Google Cloud Platform Console.
- Now, from the top navigation bar, select the GCP Project you want to investigate in.
- From the Navigation Menu on the left, you may find IAM & Admin section under All Products Section, click on it.
- Under IAM & Admin section, click on the Quotas nav link. Thence, a new Quotas Page will appear on the screen.
- You will find the list of services with their usage percentage listed down.
- At the top, you will find a row with Near the limit, Low usage, All quotas columns in it. Now, click on the View quotas link under the Near the limit option.
- A new list will appear on the screen, with a filter of Current usage percentage: >(the configured limit)%.
- If it shows, No quotas are available, that means no quotas are close enough to the per-account limit. In case, if you find any quota to be close to the Limit, then proceed ahead.
- Select the Service you want to reconfigure the settings for. Then click on the Edit Quotas option present at the top navigation bar.
- A Quota Changes dialog box appears from the left. You can now set the New Limit according to your preference. Click Done, and complete the Submit Request.
- This will raise the request for increasing the limit of the service.
- You may repeat the above steps for other GCP Projects under your organization.