Control: Compute Instances should restrict write permission on deny policy
Description
This control ensures that Compute Instance does not allow write permission on deny policies.
Usage
Run the control in your terminal:
powerpipe control run gcp_compliance.control.compute_instance_no_write_permission_on_deny_policySnapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run gcp_compliance.control.compute_instance_no_write_permission_on_deny_policy --shareSQL
This control uses a named query:
compute_instance_no_write_permission_on_deny_policy