Control: Ensure that Service Account has no Admin privileges
Description
A service account is a special Google account that belongs to an application or a VM, instead of to an individual end-user. The application uses the service account to call the service's Google API so that users aren't directly involved. It's recommended not to use admin access for ServiceAccount.
Usage
Run the control in your terminal:
powerpipe control run gcp_compliance.control.iam_service_account_without_admin_privilegeSnapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run gcp_compliance.control.iam_service_account_without_admin_privilege --shareSQL
This control uses a named query:
iam_service_account_without_admin_privilege