Mods
GCP

IAM Role: GCP/App Engine/Operator

PermissionGrant
cloudsecurityscanner.scanruns.stopOperator
cloudsecurityscanner.scans.runOperator
appengine.applications.getMetadata
appengine.instances.getMetadata
appengine.instances.listMetadata
appengine.memcache.getMetadata
appengine.memcache.getKeyMetadata
appengine.memcache.listMetadata
appengine.operations.getMetadata
appengine.operations.listMetadata
appengine.services.getMetadata
appengine.services.listMetadata
appengine.versions.getMetadata
appengine.versions.getFileContentsMetadata
appengine.versions.listMetadata
cloudscheduler.jobs.getMetadata
cloudscheduler.jobs.listMetadata
cloudsecurityscanner.crawledurls.listMetadata
cloudsecurityscanner.results.getMetadata
cloudsecurityscanner.results.listMetadata
cloudsecurityscanner.scanruns.getMetadata
cloudsecurityscanner.scanruns.getSummaryMetadata
cloudsecurityscanner.scanruns.listMetadata
cloudsecurityscanner.scans.getMetadata
cloudsecurityscanner.scans.listMetadata
cloudtasks.queues.getIamPolicyMetadata
compute.addresses.listMetadata
resourcemanager.projects.getMetadata