Query: Compute Instances should restrict service account impersonate permission

Description

This control ensures that Compute Instance does not allow service account impersonate permissions.

Query

Tables used in this query:

• gcp_compute_instance
• gcp_iam_policy
• gcp_iam_role

Controls using this query:

• Compute Instances should restrict service account impersonate permission

SQL