turbot/gcp_compliance

Control: Compute Instances should restrict service account impersonate permission

Description

This control ensures that Compute Instance does not allow service account impersonate permissions.

Usage

Run the control in your terminal:

powerpipe control run gcp_compliance.control.compute_instance_no_service_account_impersonate_permission

Snapshot and share results via Turbot Pipes:

powerpipe login
powerpipe control run gcp_compliance.control.compute_instance_no_service_account_impersonate_permission --share

SQL

This control uses a named query:

compute_instance_no_service_account_impersonate_permission

Tags