Control: Compute Instances should restrict service account impersonate permission
Description
This control ensures that Compute Instance does not allow service account impersonate permissions.
Usage
Run the control in your terminal:
powerpipe control run gcp_compliance.control.compute_instance_no_service_account_impersonate_permissionSnapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run gcp_compliance.control.compute_instance_no_service_account_impersonate_permission --shareSQL
This control uses a named query:
compute_instance_no_service_account_impersonate_permission