Turbot Guardrails Hub 
Hub
  • Mods
  • Policy Packs
  • Docs
  • Home
ModsPolicy PacksDocsHome
Mods
GCP
  • GCP/Admin
  • GCP/Metadata
  • GCP/App Engine/Admin
  • GCP/App Engine/Operator
  • GCP/App Engine/Metadata
  • GCP/BigQuery/Admin
  • GCP/BigQuery/Operator
  • GCP/BigQuery/Metadata
  • GCP/BigQuery Data Transfer/Admin
  • GCP/BigQuery Data Transfer/Metadata
  • GCP/Bigtable/Admin
  • GCP/Bigtable/Operator
  • GCP/Bigtable/Metadata
  • GCP/Build Service/Admin
  • GCP/Build Service/Metadata
  • GCP/Compute Engine/Admin
  • GCP/Compute Engine/Operator
  • GCP/Compute Engine/ReadOnly
  • GCP/Compute Engine/Metadata
  • GCP/Data Catalog/Admin
  • GCP/Data Catalog/Metadata
  • GCP/Dataflow/Admin
  • GCP/Dataflow/Operator
  • GCP/Dataflow/Metadata
  • GCP/Datapipeline/Admin
  • GCP/Datapipeline/Metadata
  • GCP/Dataproc/Admin
  • GCP/Dataproc/Operator
  • GCP/Dataproc/Metadata
  • GCP/DNS/Admin
  • GCP/DNS/Operator
  • GCP/DNS/Metadata
  • GCP/Functions/Admin
  • GCP/Functions/Operator
  • GCP/Functions/Metadata
  • GCP/IAM/Owner
  • GCP/IAM/Metadata
  • GCP/Logging/Admin
  • GCP/Logging/Metadata
  • GCP/Monitoring/Admin
  • GCP/Monitoring/Metadata
  • GCP/Network/Admin
  • GCP/Network/Operator
  • GCP/Network/Metadata
  • GCP/Notebooks/Admin
  • GCP/Notebooks/Operator
  • GCP/Notebooks/Metadata
  • GCP/OAuth/Admin
  • GCP/OAuth/Metadata
  • GCP/Pub/Sub/Admin
  • GCP/Pub/Sub/Operator
  • GCP/Pub/Sub/Metadata
  • GCP/Cloud Run/Admin
  • GCP/Cloud Run/Metadata
  • GCP/Scheduler/Admin
  • GCP/Scheduler/Operator
  • GCP/Scheduler/Metadata
  • GCP/Secret Manager/Admin
  • GCP/Secret Manager/Metadata
  • GCP/Spanner/Admin
  • GCP/Spanner/Operator
  • GCP/Spanner/Metadata
  • GCP/SQL/Admin
  • GCP/SQL/Operator
  • GCP/SQL/Metadata
  • GCP/Storage/Admin
  • GCP/Storage/Operator
  • GCP/Storage/Metadata
  • GCP/Vertex AI/Admin
  • GCP/Vertex AI/Metadata

IAM Role: GCP/Compute Engine/Admin

PermissionGrant
compute.addresses.useAdmin
compute.autoscalers.createAdmin
compute.autoscalers.deleteAdmin
compute.autoscalers.updateAdmin
compute.backendBuckets.createAdmin
compute.backendBuckets.deleteAdmin
compute.backendBuckets.updateAdmin
compute.backendBuckets.useAdmin
compute.commitments.createAdmin
compute.disks.createAdmin
compute.disks.createSnapshotAdmin
compute.disks.deleteAdmin
compute.disks.resizeAdmin
compute.disks.setIamPolicyAdmin
compute.disks.updateAdmin
compute.disks.useAdmin
compute.globalOperations.deleteAdmin
compute.healthChecks.createAdmin
compute.healthChecks.deleteAdmin
compute.healthChecks.updateAdmin
compute.healthChecks.useAdmin
compute.httpHealthChecks.createAdmin
compute.httpHealthChecks.deleteAdmin
compute.httpHealthChecks.updateAdmin
compute.httpHealthChecks.useAdmin
compute.httpsHealthChecks.createAdmin
compute.httpsHealthChecks.deleteAdmin
compute.httpsHealthChecks.updateAdmin
compute.httpsHealthChecks.useAdmin
compute.images.createAdmin
compute.images.deleteAdmin
compute.images.deprecateAdmin
compute.images.setIamPolicyAdmin
compute.images.updateAdmin
compute.instanceGroupManagers.createAdmin
compute.instanceGroupManagers.deleteAdmin
compute.instanceGroupManagers.updateAdmin
compute.instanceGroupManagers.useAdmin
compute.instanceGroups.createAdmin
compute.instanceGroups.deleteAdmin
compute.instanceGroups.updateAdmin
compute.instanceGroups.useAdmin
compute.instanceTemplates.createAdmin
compute.instanceTemplates.deleteAdmin
compute.instanceTemplates.setIamPolicyAdmin
compute.instances.addAccessConfigAdmin
compute.instances.attachDiskAdmin
compute.instances.createAdmin
compute.instances.deleteAdmin
compute.instances.deleteAccessConfigAdmin
compute.instances.detachDiskAdmin
compute.instances.osAdminLoginAdmin
compute.instances.osLoginAdmin
compute.instances.resetAdmin
compute.instances.setDeletionProtectionAdmin
compute.instances.setDiskAutoDeleteAdmin
compute.instances.setIamPolicyAdmin
compute.instances.setMachineTypeAdmin
compute.instances.setMetadataAdmin
compute.instances.setSchedulingAdmin
compute.instances.updateAdmin
compute.instances.useAdmin
compute.licenses.createAdmin
compute.networks.useExternalIpAdmin
compute.networks.useExternalIpAdmin
compute.nodeGroups.addNodesAdmin
compute.nodeGroups.createAdmin
compute.nodeGroups.deleteAdmin
compute.nodeGroups.deleteNodesAdmin
compute.nodeGroups.setIamPolicyAdmin
compute.nodeGroups.setNodeTemplateAdmin
compute.nodeTemplates.createAdmin
compute.nodeTemplates.deleteAdmin
compute.nodeTemplates.setIamPolicyAdmin
compute.projects.setCommonInstanceMetadataAdmin
compute.projects.setDefaultNetworkTierAdmin
compute.projects.setDefaultServiceAccountAdmin
compute.projects.setUsageExportBucketAdmin
compute.regionOperations.deleteAdmin
compute.snapshots.createAdmin
compute.snapshots.deleteAdmin
compute.sslCertificates.createAdmin
compute.sslCertificates.deleteAdmin
compute.sslPolicies.createAdmin
compute.sslPolicies.deleteAdmin
compute.sslPolicies.updateAdmin
compute.sslPolicies.useAdmin
compute.subnetworks.useAdmin
compute.subnetworks.useExternalIpAdmin
compute.targetHttpProxies.deleteAdmin
compute.targetHttpProxies.updateAdmin
compute.targetHttpProxies.useAdmin
compute.targetHttpsProxies.deleteAdmin
compute.targetHttpsProxies.setSslCertificatesAdmin
compute.targetHttpsProxies.setSslPolicyAdmin
compute.targetHttpsProxies.updateAdmin
compute.targetHttpsProxies.useAdmin
compute.targetInstances.createAdmin
compute.targetInstances.deleteAdmin
compute.targetInstances.useAdmin
compute.targetPools.addHealthCheckAdmin
compute.targetPools.addInstanceAdmin
compute.targetPools.createAdmin
compute.targetPools.deleteAdmin
compute.targetPools.removeHealthCheckAdmin
compute.targetPools.removeInstanceAdmin
compute.targetPools.updateAdmin
compute.targetPools.useAdmin
compute.targetSslProxies.deleteAdmin
compute.targetSslProxies.setProxyHeaderAdmin
compute.targetSslProxies.setSslCertificatesAdmin
compute.targetSslProxies.updateAdmin
compute.targetSslProxies.useAdmin
compute.urlMaps.createAdmin
compute.urlMaps.deleteAdmin
compute.urlMaps.invalidateCacheAdmin
compute.urlMaps.useAdmin
compute.urlMaps.validateAdmin
compute.zoneOperations.deleteAdmin
compute.disks.setLabelsOperator
compute.images.setLabelsOperator
compute.instances.setLabelsOperator
compute.instances.setTagsOperator
compute.instances.startOperator
compute.instances.startWithEncryptionKeyOperator
compute.instances.stopOperator
compute.snapshots.setLabelsOperator
compute.urlMaps.updateOperator
compute.disks.useReadOnlyReadOnly
compute.healthChecks.useReadOnlyReadOnly
compute.httpHealthChecks.useReadOnlyReadOnly
compute.httpsHealthChecks.useReadOnlyReadOnly
compute.images.useReadOnlyReadOnly
compute.instanceTemplates.useReadOnlyReadOnly
compute.snapshots.useReadOnlyReadOnly
compute.acceleratorTypes.getMetadata
compute.acceleratorTypes.listMetadata
compute.addresses.getMetadata
compute.addresses.listMetadata
compute.autoscalers.getMetadata
compute.autoscalers.listMetadata
compute.backendBuckets.getMetadata
compute.backendBuckets.listMetadata
compute.commitments.getMetadata
compute.commitments.listMetadata
compute.diskTypes.getMetadata
compute.diskTypes.listMetadata
compute.disks.getMetadata
compute.disks.getIamPolicyMetadata
compute.disks.listMetadata
compute.firewalls.getMetadata
compute.firewalls.listMetadata
compute.forwardingRules.getMetadata
compute.forwardingRules.listMetadata
compute.globalAddresses.getMetadata
compute.globalAddresses.listMetadata
compute.globalForwardingRules.getMetadata
compute.globalForwardingRules.listMetadata
compute.globalOperations.getMetadata
compute.globalOperations.listMetadata
compute.healthChecks.getMetadata
compute.healthChecks.listMetadata
compute.httpHealthChecks.getMetadata
compute.httpHealthChecks.listMetadata
compute.httpsHealthChecks.getMetadata
compute.httpsHealthChecks.listMetadata
compute.images.getMetadata
compute.images.getFromFamilyMetadata
compute.images.getIamPolicyMetadata
compute.images.listMetadata
compute.instanceGroupManagers.getMetadata
compute.instanceGroupManagers.listMetadata
compute.instanceGroups.getMetadata
compute.instanceGroups.listMetadata
compute.instanceTemplates.getMetadata
compute.instanceTemplates.getIamPolicyMetadata
compute.instanceTemplates.listMetadata
compute.instances.getMetadata
compute.instances.getGuestAttributesMetadata
compute.instances.getIamPolicyMetadata
compute.instances.getSerialPortOutputMetadata
compute.instances.listMetadata
compute.instances.listReferrersMetadata
compute.licenseCodes.getMetadata
compute.licenseCodes.getIamPolicyMetadata
compute.licenseCodes.listMetadata
compute.licenses.getMetadata
compute.licenses.getIamPolicyMetadata
compute.licenses.listMetadata
compute.machineTypes.getMetadata
compute.machineTypes.listMetadata
compute.maintenancePolicies.getMetadata
compute.maintenancePolicies.getIamPolicyMetadata
compute.maintenancePolicies.listMetadata
compute.networks.getMetadata
compute.networks.listMetadata
compute.nodeGroups.getMetadata
compute.nodeGroups.getIamPolicyMetadata
compute.nodeGroups.listMetadata
compute.nodeTemplates.getMetadata
compute.nodeTemplates.getIamPolicyMetadata
compute.nodeTemplates.listMetadata
compute.nodeTypes.getMetadata
compute.nodeTypes.listMetadata
compute.projects.getMetadata
compute.regionOperations.getMetadata
compute.regionOperations.getIamPolicyMetadata
compute.regionOperations.listMetadata
compute.regions.getMetadata
compute.regions.listMetadata
compute.routers.getMetadata
compute.routers.listMetadata
compute.routes.getMetadata
compute.routes.listMetadata
compute.securityPolicies.getMetadata
compute.securityPolicies.getIamPolicyMetadata
compute.securityPolicies.listMetadata
compute.snapshots.getMetadata
compute.snapshots.listMetadata
compute.sslCertificates.getMetadata
compute.sslCertificates.listMetadata
compute.sslPolicies.getMetadata
compute.sslPolicies.listMetadata
compute.sslPolicies.listAvailableFeaturesMetadata
compute.subnetworks.getMetadata
compute.subnetworks.getIamPolicyMetadata
compute.subnetworks.listMetadata
compute.targetHttpProxies.getMetadata
compute.targetHttpProxies.listMetadata
compute.targetHttpsProxies.getMetadata
compute.targetHttpsProxies.listMetadata
compute.targetInstances.getMetadata
compute.targetInstances.listMetadata
compute.targetPools.getMetadata
compute.targetPools.listMetadata
compute.targetSslProxies.getMetadata
compute.targetSslProxies.listMetadata
compute.targetVpnGateways.getMetadata
compute.targetVpnGateways.listMetadata
compute.urlMaps.getMetadata
compute.urlMaps.listMetadata
compute.vpnTunnels.getMetadata
compute.vpnTunnels.listMetadata
compute.zoneOperations.getMetadata
compute.zoneOperations.listMetadata
compute.zones.getMetadata
compute.zones.listMetadata
resourcemanager.projects.getMetadata
serviceusage.quotas.getMetadata
serviceusage.services.getMetadata
Guardrails
Guardrails Hub
  • Hub
  • Docs
  • Blog
  • Changelog
Products
  • GuardrailsGuardrails
  • PipesPipes
  • SteampipeSteampipe
  • PowerpipePowerpipe
  • FlowpipeFlowpipe
  • TailpipeTailpipe
Turbot
  • Home
  • About us
  • We're hiring!
  • Contact us
Community

Our community of practitioners love to discuss cloud governance & security.

Slack logoJoin us on Slack →

System StatusLegalSecurity
Terms of UseSecurityPrivacy
39
Mods
123
Resource Types
2,217
Policies
1,091
Controls
118
Quick Actions
71
IAM