turbot/terraform_gcp_compliance

Control: Ensure that users are not assigned the Service Account User or Service Account Token Creator roles at project level

Description

This control checks that users are not assigned the Service Account User or Service Account Token Creator roles at the project level.

Usage

Run the control in your terminal:

powerpipe control run terraform_gcp_compliance.control.iam_project_no_service_account_token_creator_role

Snapshot and share results via Turbot Pipes:

powerpipe login
powerpipe control run terraform_gcp_compliance.control.iam_project_no_service_account_token_creator_role --share

SQL

This control uses a named query:

iam_project_no_service_account_token_creator_role

Tags