gcp-auth-failures

Use this skill when users need to audit, detect, or remediate Identification and Authentication Failures (OWASP A07:2021) on Google Cloud Platform. This includes auditing Identity-Aware Proxy (IAP) configuration, enforcing multi-factor authentication (MFA), detecting brute force attack vectors, configuring Cloud Armor rate limiting, reviewing API key rotation and session management, checking Identity Platform and reCAPTCHA Enterprise enablement, and monitoring authentication-related Security Command Center findings. Activate for GCP authentication hardening, brute force protection, MFA enforcement, rate limiting configuration, or OWASP A07 compliance.