Organization-level scans in the API/UI for GCP

[iJackWilson]

Feature search

• I have searched the existing issues and this feature has not been requested yet or is already in our Public Roadmap

Which component would this feature affect?

Prowler UI

Related to specific cloud provider?

GCP

New feature motivation

The Prowler CLI supports org-wide scanning via the --organization-id argument. When configuring GCP scanning in the Prowler UI (self-hosted in GKE), I do not see an equivalent option. It appears to require configuration on a per-project basis.

This is tedious to configure and manage in an organization with multiple projects.

This appears adjacent to an item showing completed on the roadmap around "Multi accounts/projects/subscriptions provisioning support in the UI", but in a slightly different format (just passing in the org ID).

Solution Proposed

When configuring GCP scanning in the UI, allow an Organisation ID to be passed in.

Use case and benefits

Easier configuration and management in GCP environments where there are many projects.

Describe alternatives you've considered

Configure scanning on a per-project basis.

Additional context

No response

[puchy22]

Hi @iJackWilson,

Thanks for the detailed feature request!

Organization-level scans for GCP (passing in an Organization ID when configuring scanning) is something we plan to bring to Prowler Cloud. We don't have a specific release date to share just yet, but it's on our radar.

I'll keep this issue open so the community can track its progress, and I'll notify here and close it once the feature is implemented.

[iJackWilson]

Thanks @puchy22 - just to confirm when you mention it's "something we plan to bring to Prowler Cloud", will it also be available/supported in the open source/self-hosted version?

[puchy22]

Hi @iJackWilson,

Let me clarify how this fits together. Beyond the OSS Prowler in this repo, we also offer Prowler Cloud, our managed SaaS, and Prowler Enterprise, and both include a set of capabilities that go beyond what's available in the open source version. Org-level GCP scanning is one of those, which is why you're seeing it in the CLI but not (yet) in the self-hosted UI. If you want to see how the three compare side by side, our pricing page lays out the differences between OSS, Cloud, and Enterprise.

If you want to know more details about our paid offering, don't hesitate to reach out to us at https://prowler.com/contact.