All integrations
A
Cloud Providers
Google Cloud
Active connector
Pre-built & maintained
No-code setup
Overview
Tello's Google Cloud integration connects your GCP organization, projects, IAM bindings, and service accounts into a unified identity governance workflow. Eliminate standing privilege and over-permissioned service accounts while enabling your teams to move fast with self-service access that Tello approves, tracks, and revokes automatically.
What Tello automates in AWS
- Provision and deprovision IAM and Identity Center users automatically
- Orchestrate dynamic group and role assignments driven by HR context
- Enforce least-privilege access policies across all AWS accounts and regions
- Enable self-service access requests with auto-approval workflows
- Run fully automated access certifications and SoD conflict reviews
- Detect and remediate orphaned accounts and over-privileged roles in real time
- Enforce just-in-time (JIT) access with automatic time-bound expiration
- Generate audit-ready compliance reports for SOC 2, ISO 27001, and FedRAMP
How it works
01
Connect
Authenticate via IAM role delegation — no long-lived credentials, no manual API keys.
02
Discover
Tello maps all users, groups, roles, and permission boundaries across every AWS account.
03
Govern
Policies execute automatically — provisioning, deprovisioning, JIT access, and certifications.
