Control: Compute Instances should restrict data destruction permission
Description
This control ensures that Compute Instance does not allow data destruction permissions.
Usage
Run the control in your terminal:
powerpipe control run gcp_compliance.control.compute_instance_no_data_destruction_permissionSnapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run gcp_compliance.control.compute_instance_no_data_destruction_permission --shareSQL
This control uses a named query:
compute_instance_no_data_destruction_permission