> For the complete documentation index, see [llms.txt](https://docs.forestall.io/fsprotect/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.forestall.io/fsprotect/scans/policies/gcp-policies.md).

# GCP Policies

## GCP Policies

GCP Policies define security controls and assessment rules tailored for cloud-based identity and resource environments.

These policies focus on analyzing identity-related risks, role assignments, authentication configurations, and access control mechanisms within GCP.

By using GCP-specific policies, FSProtect helps identify privilege misuse, risky identity configurations, and exposure points in modern cloud identity infrastructures.

***

### Edit Scan Policy (GCP)

This section allows users to configure scan settings specific to GCP environments, including enabled modules, exclusions, and scan options.

***

### Vulnerability Policies and Tiering (GCP)

This section defines vulnerability policies and tiering configurations specific to GCP environments. Vulnerability policies determine which GCP-specific security checks are executed during the scan, while tiering helps identify critical cloud identities and roles based on their potential security impact.

***

### GCP Scan Modules

**GCP Assessment:** This module enables users to identify and evaluate vulnerabilities, misconfigurations, and security risks within their GCP environment, including IAM, resources, roles, and permissions. It provides deep visibility into the cloud configuration and access relationships across projects, folders, and organizations. As a core component of the engine for cloud-based assessments, this module is a mandatory option. When it is the only enabled module in the scan policy, the engine communicates solely with GCP services and APIs, without interacting with on-premises infrastructure.

***

### Tier 0 Assets (GCP)

Tier 0 Assets settings allow users to designate critical GCP identities as privileged. Selected GCP users, groups, service accounts, and roles are treated as high-impact identities and are prioritized during privilege exposure and attack path analysis. Identities marked as Tier 0 Assets represent potential organization-level compromise if misused or exposed.


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.forestall.io/fsprotect/scans/policies/gcp-policies.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.