Query: Compute Instances should restrict IAM write permission

Description

This is control ensures that Compute Instance does not allow IAM write permissions.

Query

Tables used in this query:

• gcp_compute_instance
• gcp_iam_policy
• gcp_iam_role

Controls using this query:

• Compute Instances should restrict IAM write permission

SQL