Wiz adds Google Cloud excessive access detection based on audit logs

Wiz has extended its identity security capabilities for Google Cloud Platform (GCP) by adding support for excessive access findings based on Google audit logs. The feature is available to all Wiz GCP customers, regardless of their Security Command Center (SCC) pricing tier.

The new capability identifies over-provisioned permissions and inactive users or service accounts, providing guidance to enforce least-privilege access. It complements Wiz’s existing use of Google’s IAM Recommender, which is now limited to customers with the Premium tier of SCC.

Wiz’s analysis also highlights how identity misconfigurations can create attack paths, such as a publicly exposed compute instance with excessive permissions and a known vulnerability.