Turbot Guardrails Hub 
Hub
  • Mods
  • Policy Packs
  • Docs
  • Home
ModsPolicy PacksDocsHome
Mods
Azure
  • Azure/Owner
  • Azure/Admin
  • Azure/Operator
  • Azure/Metadata
  • Azure/AI Foundry/admin
  • Azure/AI Foundry/metadata
  • Azure/AKS/admin
  • Azure/AKS/metadata
  • Azure/Alerts Management/admin
  • Azure/Alerts Management/operator
  • Azure/Alerts Management/metadata
  • Azure/API Management/admin
  • Azure/API Management/operator
  • Azure/API Management/metadata
  • Azure/Application Gateway/admin
  • Azure/Application Gateway/operator
  • Azure/Application Gateway/readonly
  • Azure/Application Gateway/metadata
  • Azure/Application Insights/admin
  • Azure/Application Insights/metadata
  • Azure/App Service/admin
  • Azure/App Service/metadata
  • Azure/Automation/admin
  • Azure/Automation/operator
  • Azure/Automation/metadata
  • Azure/Bot Service/Admin
  • Azure/Bot Service/Operator
  • Azure/Bot Service/Metadata
  • Azure/Cognitive Services/admin
  • Azure/Cognitive Services/operator
  • Azure/Cognitive Services/metadata
  • Azure/Compute/admin
  • Azure/Compute/operator
  • Azure/Compute/metadata
  • Azure/Container Registry/admin
  • Azure/Container Registry/metadata
  • Azure/Cosmos DB/admin
  • Azure/Cosmos DB/operator
  • Azure/Cosmos DB/metadata
  • Azure/Databricks/admin
  • Azure/Databricks/metadata
  • Azure/Data Factory/admin
  • Azure/Data Factory/metadata
  • Azure/DNS/admin
  • Azure/DNS/metadata
  • Azure/Firewall/admin
  • Azure/Firewall/metadata
  • Azure/Front Door/admin
  • Azure/Front Door/operator
  • Azure/Front Door/metadata
  • Azure/IAM/Owner
  • Azure/IAM/Metadata
  • Azure/Key Vault/admin
  • Azure/Key Vault/operator
  • Azure/Key Vault/metadata
  • Azure/Load Balancer/admin
  • Azure/Load Balancer/metadata
  • Azure/Log Analytics/admin
  • Azure/Log Analytics/metadata
  • Azure/Managed Identity/admin
  • Azure/Managed Identity/metadata
  • Azure/Monitor/Admin
  • Azure/Monitor/Operator
  • Azure/Monitor/Metadata
  • Azure/MySQL/admin
  • Azure/MySQL/metadata
  • Azure/Network/Admin
  • Azure/Network/Operator
  • Azure/Network/ReadOnly
  • Azure/Network/Metadata
  • Azure/Network Watcher/admin
  • Azure/Network Watcher/operator
  • Azure/Network Watcher/readonly
  • Azure/Network Watcher/metadata
  • Azure/PostgreSQL/admin
  • Azure/PostgreSQL/operator
  • Azure/PostgreSQL/metadata
  • Azure/Recovery Service/admin
  • Azure/Recovery Service/operator
  • Azure/Recovery Service/metadata
  • Azure/Redis/Admin
  • Azure/Redis/Operator
  • Azure/Redis/Metadata
  • Azure/Relay/Admin
  • Azure/Relay/ReadOnly
  • Azure/Relay/Metadata
  • Azure/Search Management/admin
  • Azure/Search Management/metadata
  • Azure/Security Center/admin
  • Azure/Security Center/operator
  • Azure/Security Center/metadata
  • Azure/Service Bus/admin
  • Azure/Service Bus/operator
  • Azure/Service Bus/metadata
  • Azure/SignalR Service/Admin
  • Azure/SignalR Service/Operator
  • Azure/SignalR Service/Metadata
  • Azure/SQL/admin
  • Azure/SQL/operator
  • Azure/SQL/readonly
  • Azure/SQL/metadata
  • Azure/SQL Virtual Machine Service/admin
  • Azure/SQL Virtual Machine Service/operator
  • Azure/SQL Virtual Machine Service/metadata
  • Azure/Storage/Admin
  • Azure/Storage/Operator
  • Azure/Storage/Metadata
  • Azure/Synapse Analytics/admin
  • Azure/Synapse Analytics/operator
  • Azure/Synapse Analytics/metadata
  • Azure/Virtual Desktop/admin
  • Azure/Virtual Desktop/operator
  • Azure/Virtual Desktop/metadata

IAM Role: Azure/API Management/admin

PermissionGrant
microsoft.apimanagement/register/actionadmin
microsoft.apimanagement/service/apis/deleteadmin
microsoft.apimanagement/service/apis/diagnostics/deleteadmin
microsoft.apimanagement/service/apis/diagnostics/writeadmin
microsoft.apimanagement/service/apis/issues/attachments/deleteadmin
microsoft.apimanagement/service/apis/issues/attachments/writeadmin
microsoft.apimanagement/service/apis/issues/comments/deleteadmin
microsoft.apimanagement/service/apis/issues/comments/writeadmin
microsoft.apimanagement/service/apis/issues/deleteadmin
microsoft.apimanagement/service/apis/issues/writeadmin
microsoft.apimanagement/service/apis/operations/deleteadmin
microsoft.apimanagement/service/apis/operations/policies/deleteadmin
microsoft.apimanagement/service/apis/operations/policies/writeadmin
microsoft.apimanagement/service/apis/operations/policy/deleteadmin
microsoft.apimanagement/service/apis/operations/policy/writeadmin
microsoft.apimanagement/service/apis/operations/writeadmin
microsoft.apimanagement/service/apis/policies/deleteadmin
microsoft.apimanagement/service/apis/policies/writeadmin
microsoft.apimanagement/service/apis/policy/deleteadmin
microsoft.apimanagement/service/apis/policy/writeadmin
microsoft.apimanagement/service/apis/releases/deleteadmin
microsoft.apimanagement/service/apis/releases/writeadmin
microsoft.apimanagement/service/apis/revisions/deleteadmin
microsoft.apimanagement/service/apis/schemas/deleteadmin
microsoft.apimanagement/service/apis/schemas/writeadmin
microsoft.apimanagement/service/apis/tagdescriptions/deleteadmin
microsoft.apimanagement/service/apis/tagdescriptions/writeadmin
microsoft.apimanagement/service/apis/tags/deleteadmin
microsoft.apimanagement/service/apis/tags/writeadmin
microsoft.apimanagement/service/apis/writeadmin
microsoft.apimanagement/service/apiversionsets/deleteadmin
microsoft.apimanagement/service/apiversionsets/writeadmin
microsoft.apimanagement/service/applynetworkconfigurationupdates/actionadmin
microsoft.apimanagement/service/authorizationservers/deleteadmin
microsoft.apimanagement/service/authorizationservers/listsecrets/actionadmin
microsoft.apimanagement/service/authorizationservers/writeadmin
microsoft.apimanagement/service/backends/deleteadmin
microsoft.apimanagement/service/backends/reconnect/actionadmin
microsoft.apimanagement/service/backends/writeadmin
microsoft.apimanagement/service/backup/actionadmin
microsoft.apimanagement/service/caches/deleteadmin
microsoft.apimanagement/service/caches/writeadmin
microsoft.apimanagement/service/certificates/deleteadmin
microsoft.apimanagement/service/certificates/writeadmin
microsoft.apimanagement/service/contenttypes/contentitems/deleteadmin
microsoft.apimanagement/service/contenttypes/contentitems/writeadmin
microsoft.apimanagement/service/deleteadmin
microsoft.apimanagement/service/diagnostics/deleteadmin
microsoft.apimanagement/service/diagnostics/writeadmin
microsoft.apimanagement/service/gateways/actionadmin
microsoft.apimanagement/service/gateways/apis/deleteadmin
microsoft.apimanagement/service/gateways/apis/writeadmin
microsoft.apimanagement/service/gateways/deleteadmin
microsoft.apimanagement/service/gateways/writeadmin
microsoft.apimanagement/service/getssotoken/actionadmin
microsoft.apimanagement/service/groups/deleteadmin
microsoft.apimanagement/service/groups/users/deleteadmin
microsoft.apimanagement/service/groups/users/writeadmin
microsoft.apimanagement/service/groups/writeadmin
microsoft.apimanagement/service/identityproviders/deleteadmin
microsoft.apimanagement/service/identityproviders/listsecrets/actionadmin
microsoft.apimanagement/service/identityproviders/writeadmin
microsoft.apimanagement/service/loggers/deleteadmin
microsoft.apimanagement/service/loggers/writeadmin
microsoft.apimanagement/service/managedeployments/actionadmin
microsoft.apimanagement/service/namedvalues/deleteadmin
microsoft.apimanagement/service/namedvalues/writeadmin
microsoft.apimanagement/service/notifications/actionadmin
microsoft.apimanagement/service/notifications/recipientemails/deleteadmin
microsoft.apimanagement/service/notifications/recipientemails/writeadmin
microsoft.apimanagement/service/notifications/recipientusers/deleteadmin
microsoft.apimanagement/service/notifications/recipientusers/writeadmin
microsoft.apimanagement/service/notifications/writeadmin
microsoft.apimanagement/service/openidconnectproviders/deleteadmin
microsoft.apimanagement/service/openidconnectproviders/listsecrets/actionadmin
microsoft.apimanagement/service/openidconnectproviders/writeadmin
microsoft.apimanagement/service/policies/deleteadmin
microsoft.apimanagement/service/policies/writeadmin
microsoft.apimanagement/service/policy/deleteadmin
microsoft.apimanagement/service/policy/writeadmin
microsoft.apimanagement/service/portalsettings/writeadmin
microsoft.apimanagement/service/products/apis/deleteadmin
microsoft.apimanagement/service/products/apis/writeadmin
microsoft.apimanagement/service/products/deleteadmin
microsoft.apimanagement/service/products/groups/deleteadmin
microsoft.apimanagement/service/products/groups/writeadmin
microsoft.apimanagement/service/products/policies/deleteadmin
microsoft.apimanagement/service/products/policies/writeadmin
microsoft.apimanagement/service/products/policy/deleteadmin
microsoft.apimanagement/service/products/policy/writeadmin
microsoft.apimanagement/service/products/tags/deleteadmin
microsoft.apimanagement/service/products/tags/writeadmin
microsoft.apimanagement/service/products/writeadmin
microsoft.apimanagement/service/properties/deleteadmin
microsoft.apimanagement/service/properties/listsecrets/actionadmin
microsoft.apimanagement/service/properties/writeadmin
microsoft.apimanagement/service/providers/microsoft.insights/diagnosticsettings/writeadmin
microsoft.apimanagement/service/quotas/periods/writeadmin
microsoft.apimanagement/service/quotas/writeadmin
microsoft.apimanagement/service/restore/actionadmin
microsoft.apimanagement/service/subscriptions/deleteadmin
microsoft.apimanagement/service/subscriptions/listsecrets/actionadmin
microsoft.apimanagement/service/subscriptions/regenerateprimarykey/actionadmin
microsoft.apimanagement/service/subscriptions/regeneratesecondarykey/actionadmin
microsoft.apimanagement/service/subscriptions/writeadmin
microsoft.apimanagement/service/tags/deleteadmin
microsoft.apimanagement/service/tags/writeadmin
microsoft.apimanagement/service/templates/deleteadmin
microsoft.apimanagement/service/templates/writeadmin
microsoft.apimanagement/service/tenant/deleteadmin
microsoft.apimanagement/service/tenant/deploy/actionadmin
microsoft.apimanagement/service/tenant/listsecrets/actionadmin
microsoft.apimanagement/service/tenant/regenerateprimarykey/actionadmin
microsoft.apimanagement/service/tenant/regeneratesecondarykey/actionadmin
microsoft.apimanagement/service/tenant/save/actionadmin
microsoft.apimanagement/service/tenant/validate/actionadmin
microsoft.apimanagement/service/tenant/writeadmin
microsoft.apimanagement/service/updatecertificate/actionadmin
microsoft.apimanagement/service/updatehostname/actionadmin
microsoft.apimanagement/service/users/actionadmin
microsoft.apimanagement/service/users/confirmations/send/actionadmin
microsoft.apimanagement/service/users/deleteadmin
microsoft.apimanagement/service/users/generatessourl/actionadmin
microsoft.apimanagement/service/users/token/actionadmin
microsoft.apimanagement/service/users/writeadmin
microsoft.apimanagement/service/writeadmin
microsoft.apimanagement/unregister/actionadmin
microsoft.apimanagement/service/gateways/generatetoken/actionadmin
microsoft.apimanagement/service/gateways/listkeys/actionadmin
microsoft.apimanagement/service/gateways/regeneratekey/actionadmin
microsoft.apimanagement/service/namedvalues/listvalue/actionadmin
microsoft.apimanagement/service/portalsettings/listsecrets/actionadmin
microsoft.apimanagement/service/apis/operations/tags/deleteoperator
microsoft.apimanagement/service/apis/operations/tags/writeoperator
microsoft.resources/deployments/cancel/actionoperator
microsoft.resources/deployments/deleteoperator
microsoft.resources/deployments/validate/actionoperator
microsoft.resources/deployments/writeoperator
microsoft.apimanagement/checknameavailability/readmetadata
microsoft.apimanagement/operations/readmetadata
microsoft.apimanagement/reports/readmetadata
microsoft.apimanagement/service/apis/diagnostics/readmetadata
microsoft.apimanagement/service/apis/issues/attachments/readmetadata
microsoft.apimanagement/service/apis/issues/comments/readmetadata
microsoft.apimanagement/service/apis/issues/readmetadata
microsoft.apimanagement/service/apis/operations/policies/readmetadata
microsoft.apimanagement/service/apis/operations/policy/readmetadata
microsoft.apimanagement/service/apis/operations/readmetadata
microsoft.apimanagement/service/apis/operations/tags/readmetadata
microsoft.apimanagement/service/apis/operationsbytags/readmetadata
microsoft.apimanagement/service/apis/policies/readmetadata
microsoft.apimanagement/service/apis/policy/readmetadata
microsoft.apimanagement/service/apis/products/readmetadata
microsoft.apimanagement/service/apis/readmetadata
microsoft.apimanagement/service/apis/releases/readmetadata
microsoft.apimanagement/service/apis/revisions/readmetadata
microsoft.apimanagement/service/apis/schemas/readmetadata
microsoft.apimanagement/service/apis/tagdescriptions/readmetadata
microsoft.apimanagement/service/apis/tags/readmetadata
microsoft.apimanagement/service/apisbytags/readmetadata
microsoft.apimanagement/service/apiversionsets/readmetadata
microsoft.apimanagement/service/apiversionsets/versions/readmetadata
microsoft.apimanagement/service/authorizationservers/readmetadata
microsoft.apimanagement/service/backends/readmetadata
microsoft.apimanagement/service/caches/readmetadata
microsoft.apimanagement/service/certificates/readmetadata
microsoft.apimanagement/service/contenttypes/contentitems/readmetadata
microsoft.apimanagement/service/contenttypes/readmetadata
microsoft.apimanagement/service/diagnostics/readmetadata
microsoft.apimanagement/service/gateways/apis/readmetadata
microsoft.apimanagement/service/gateways/hostnameconfigurations/readmetadata
microsoft.apimanagement/service/gateways/readmetadata
microsoft.apimanagement/service/groups/readmetadata
microsoft.apimanagement/service/groups/users/readmetadata
microsoft.apimanagement/service/identityproviders/readmetadata
microsoft.apimanagement/service/issues/readmetadata
microsoft.apimanagement/service/locations/networkstatus/readmetadata
microsoft.apimanagement/service/loggers/readmetadata
microsoft.apimanagement/service/namedvalues/readmetadata
microsoft.apimanagement/service/networkstatus/readmetadata
microsoft.apimanagement/service/notifications/readmetadata
microsoft.apimanagement/service/notifications/recipientemails/readmetadata
microsoft.apimanagement/service/notifications/recipientusers/readmetadata
microsoft.apimanagement/service/openidconnectproviders/readmetadata
microsoft.apimanagement/service/operationresults/readmetadata
microsoft.apimanagement/service/policies/readmetadata
microsoft.apimanagement/service/policy/readmetadata
microsoft.apimanagement/service/policydescriptions/readmetadata
microsoft.apimanagement/service/policysnippets/readmetadata
microsoft.apimanagement/service/portalsettings/readmetadata
microsoft.apimanagement/service/products/apis/readmetadata
microsoft.apimanagement/service/products/groups/readmetadata
microsoft.apimanagement/service/products/policies/readmetadata
microsoft.apimanagement/service/products/policy/readmetadata
microsoft.apimanagement/service/products/readmetadata
microsoft.apimanagement/service/products/subscriptions/readmetadata
microsoft.apimanagement/service/products/tags/readmetadata
microsoft.apimanagement/service/productsbytags/readmetadata
microsoft.apimanagement/service/properties/readmetadata
microsoft.apimanagement/service/providers/microsoft.insights/diagnosticsettings/readmetadata
microsoft.apimanagement/service/providers/microsoft.insights/logdefinitions/readmetadata
microsoft.apimanagement/service/providers/microsoft.insights/metricdefinitions/readmetadata
microsoft.apimanagement/service/quotas/periods/readmetadata
microsoft.apimanagement/service/quotas/readmetadata
microsoft.apimanagement/service/readmetadata
microsoft.apimanagement/service/regions/readmetadata
microsoft.apimanagement/service/reports/readmetadata
microsoft.apimanagement/service/subscriptions/readmetadata
microsoft.apimanagement/service/tagresources/readmetadata
microsoft.apimanagement/service/tags/readmetadata
microsoft.apimanagement/service/templates/readmetadata
microsoft.apimanagement/service/tenant/operationresults/readmetadata
microsoft.apimanagement/service/tenant/readmetadata
microsoft.apimanagement/service/tenant/syncstate/readmetadata
microsoft.apimanagement/service/users/groups/readmetadata
microsoft.apimanagement/service/users/identities/readmetadata
microsoft.apimanagement/service/users/keys/readmetadata
microsoft.apimanagement/service/users/readmetadata
microsoft.apimanagement/service/users/subscriptions/readmetadata
microsoft.resources/deployments/operations/readmetadata
microsoft.resources/deployments/readmetadata
microsoft.resources/subscriptions/resourcegroups/readmetadata
Guardrails
Guardrails Hub
  • Hub
  • Docs
  • Blog
  • Changelog
Products
  • GuardrailsGuardrails
  • PipesPipes
  • SteampipeSteampipe
  • PowerpipePowerpipe
  • FlowpipeFlowpipe
  • TailpipeTailpipe
Turbot
  • Home
  • About us
  • We're hiring!
  • Contact us
Community

Our community of practitioners love to discuss cloud governance & security.

Slack logoJoin us on Slack →

System StatusLegalSecurity
Terms of UseSecurityPrivacy
50
Mods
205
Resource Types
3,574
Policies
1,936
Controls
103
Quick Actions
114
IAM