Loading controls...
Control: Ensure that IAM users are not assigned the Service Account User or Service Account Token Creator roles at project level
Description
It is recommended to assign the Service Account User (iam.serviceAccountUser) and Service Account Token Creator (iam.serviceAccountTokenCreator) roles to a user for a specific service account rather than assigning the role to a user at project level.
Usage
Run the control in your terminal:
powerpipe control run gcp_compliance.control.iam_user_not_assigned_service_account_user_role_project_levelSnapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run gcp_compliance.control.iam_user_not_assigned_service_account_user_role_project_level --shareSQL
This control uses a named query:
iam_user_not_assigned_service_account_user_role_project_level