Content last updated 2024-11-14

アクセスチェック (accesschk)

アクセスチェック (accesschk) は、アクセス制御 (accessctl) とは別のパイプラインで、コンプライアンス対象システムごとに、ユーザーや構成の現在の状態についてのエビデンス収集に焦点を当てたものです。このパイプラインは、API からのデータの (e)xtract（抽出/取得）、CSV と JSON の日付付きファイルへの (t)ransform（フォーマット/変換）、および監査・コンプライアンスのユーザーが分析・参照できるよう GitLab リポジトリへの load（ロード）といった ETL（extract-transform-load）プロセスを自動化します。

CI/CD パイプライン概要

graph LR

subgraph accesschk GitLab Repositories
direction LR
subgraph accesschk-evidence Repo
direction LR
end
end

subgraph accesschk GitLab CI/CD Pipeline Jobs
direction LR
subgraph Okta API
CI_AUDIT_OKTA_USER_JOB["Okta Users Job<br />chk:okta-users"]
CI_AUDIT_OKTA_APP_JOB["Okta Apps Job<br />chk:okta-apps"]
CI_AUDIT_OKTA_GROUP_JOB["Okta Groups Job<br />chk:okta-groups"]
CI_AUDIT_OKTA_POLICY_JOB["Okta Policies Job<br />chk:okta-policies"]
CI_AUDIT_OKTA_ADMIN_ROLES_JOB["Okta Admin Roles Job<br />chk:okta-admin-roles"]
CI_AUDIT_OKTA_SETTING_JOB["Okta Settings Job<br />chk:okta-settings"]
end
subgraph Google Workspace Directory API
CI_AUDIT_GOOGLE_USER_JOB["Google Users Job<br />chk:google-users"]
CI_AUDIT_GOOGLE_ADMIN_ROLES_JOB["Google Admin Roles Job<br />chk:google-admin-roles"]
CI_AUDIT_GOOGLE_GROUP_JOB["Google Groups Job<br />chk:google-groups"]
CI_AUDIT_GOOGLE_CHROME_JOB["Google Chrome Policies Job<br />chk:google-chrome"]
CI_AUDIT_GOOGLE_ORG_UNIT_JOB["Google Org Units Job<br />chk:google-org-units"]
end
subgraph Google Cloud Resource Manager and IAM API
CI_AUDIT_GCP_ORGS_JOB["Google Cloud Organizations Job<br />chk:gcp-organizations"]
CI_AUDIT_GCP_FOLDERS_JOB["Google Cloud Folders Job<br />chk:gcp-folders"]
CI_AUDIT_GCP_PROJECTS_JOB["Google Cloud Projects Job<br />chk:gcp-projects"]
CI_AUDIT_GCP_SERVICE_ACCOUNTS_JOB["Google Cloud Service Accounts Job<br />chk:gcp-service-accounts"]
CI_AUDIT_GCP_BILLING_ACCOUNTS_JOB["Google Cloud Billing Accounts Job<br />chk:gcp-billing-accounts"]
end
subgraph GitLab.com SaaS API
CI_AUDIT_GITLAB_SAAS_GROUP_JOB["GitLab SaaS Groups Job<br />chk:gitlab-saas-groups"]
CI_AUDIT_GITLAB_SAAS_PROJECTS_JOB["GitLab SaaS Projects Job<br />chk:gitlab-saas-projects"]
CI_AUDIT_GITLAB_SAAS_ADMIN_JOB["GitLab SaaS Admin Roles Job<br />chk:gitlab-saas-admins"]
end
subgraph GitLab Self-Managed Instance API
CI_AUDIT_GITLAB_SELF_GROUP_JOB["GitLab Self-Managed Groups Job<br />chk:gitlab-self-groups"]
CI_AUDIT_GITLAB_SELF_PROJECTS_JOB["GitLab Self-Managed Projects Job<br />chk:gitlab-self-projects"]
CI_AUDIT_GITLAB_SELF_ADMIN_JOB["GitLab Self-Managed Admin Roles Job<br />chk:gitlab-self-admins"]
end
end
最終更新 June 14, 2026: Merge pull request #403 from kyama0/claude/cool-turing-ls6eck (bfd74782)
ページのソースコードを見る - ページの編集 - please contribute. Creative Commons License