Turbot Guardrails Hub 
Hub
  • Mods
  • Policy Packs
  • Docs
  • Home
ModsPolicy PacksDocsHome
Mods
GCP
  • GCP/Admin
  • GCP/Metadata
  • GCP/App Engine/Admin
  • GCP/App Engine/Operator
  • GCP/App Engine/Metadata
  • GCP/BigQuery/Admin
  • GCP/BigQuery/Operator
  • GCP/BigQuery/Metadata
  • GCP/BigQuery Data Transfer/Admin
  • GCP/BigQuery Data Transfer/Metadata
  • GCP/Bigtable/Admin
  • GCP/Bigtable/Operator
  • GCP/Bigtable/Metadata
  • GCP/Build Service/Admin
  • GCP/Build Service/Metadata
  • GCP/Compute Engine/Admin
  • GCP/Compute Engine/Operator
  • GCP/Compute Engine/ReadOnly
  • GCP/Compute Engine/Metadata
  • GCP/Data Catalog/Admin
  • GCP/Data Catalog/Metadata
  • GCP/Dataflow/Admin
  • GCP/Dataflow/Operator
  • GCP/Dataflow/Metadata
  • GCP/Datapipeline/Admin
  • GCP/Datapipeline/Metadata
  • GCP/Dataproc/Admin
  • GCP/Dataproc/Operator
  • GCP/Dataproc/Metadata
  • GCP/DNS/Admin
  • GCP/DNS/Operator
  • GCP/DNS/Metadata
  • GCP/Functions/Admin
  • GCP/Functions/Operator
  • GCP/Functions/Metadata
  • GCP/IAM/Owner
  • GCP/IAM/Metadata
  • GCP/Logging/Admin
  • GCP/Logging/Metadata
  • GCP/Monitoring/Admin
  • GCP/Monitoring/Metadata
  • GCP/Network/Admin
  • GCP/Network/Operator
  • GCP/Network/Metadata
  • GCP/Notebooks/Admin
  • GCP/Notebooks/Operator
  • GCP/Notebooks/Metadata
  • GCP/OAuth/Admin
  • GCP/OAuth/Metadata
  • GCP/Pub/Sub/Admin
  • GCP/Pub/Sub/Operator
  • GCP/Pub/Sub/Metadata
  • GCP/Cloud Run/Admin
  • GCP/Cloud Run/Metadata
  • GCP/Scheduler/Admin
  • GCP/Scheduler/Operator
  • GCP/Scheduler/Metadata
  • GCP/Secret Manager/Admin
  • GCP/Secret Manager/Metadata
  • GCP/Spanner/Admin
  • GCP/Spanner/Operator
  • GCP/Spanner/Metadata
  • GCP/SQL/Admin
  • GCP/SQL/Operator
  • GCP/SQL/Metadata
  • GCP/Storage/Admin
  • GCP/Storage/Operator
  • GCP/Storage/Metadata
  • GCP/Vertex AI/Admin
  • GCP/Vertex AI/Metadata

IAM Role: GCP/Compute Engine/Operator

PermissionGrant
compute.disks.setLabelsOperator
compute.images.setLabelsOperator
compute.instances.setLabelsOperator
compute.instances.setTagsOperator
compute.instances.startOperator
compute.instances.startWithEncryptionKeyOperator
compute.instances.stopOperator
compute.snapshots.setLabelsOperator
compute.urlMaps.updateOperator
compute.disks.useReadOnlyReadOnly
compute.healthChecks.useReadOnlyReadOnly
compute.httpHealthChecks.useReadOnlyReadOnly
compute.httpsHealthChecks.useReadOnlyReadOnly
compute.images.useReadOnlyReadOnly
compute.instanceTemplates.useReadOnlyReadOnly
compute.snapshots.useReadOnlyReadOnly
compute.acceleratorTypes.getMetadata
compute.acceleratorTypes.listMetadata
compute.addresses.getMetadata
compute.addresses.listMetadata
compute.autoscalers.getMetadata
compute.autoscalers.listMetadata
compute.backendBuckets.getMetadata
compute.backendBuckets.listMetadata
compute.commitments.getMetadata
compute.commitments.listMetadata
compute.diskTypes.getMetadata
compute.diskTypes.listMetadata
compute.disks.getMetadata
compute.disks.getIamPolicyMetadata
compute.disks.listMetadata
compute.firewalls.getMetadata
compute.firewalls.listMetadata
compute.forwardingRules.getMetadata
compute.forwardingRules.listMetadata
compute.globalAddresses.getMetadata
compute.globalAddresses.listMetadata
compute.globalForwardingRules.getMetadata
compute.globalForwardingRules.listMetadata
compute.globalOperations.getMetadata
compute.globalOperations.listMetadata
compute.healthChecks.getMetadata
compute.healthChecks.listMetadata
compute.httpHealthChecks.getMetadata
compute.httpHealthChecks.listMetadata
compute.httpsHealthChecks.getMetadata
compute.httpsHealthChecks.listMetadata
compute.images.getMetadata
compute.images.getFromFamilyMetadata
compute.images.getIamPolicyMetadata
compute.images.listMetadata
compute.instanceGroupManagers.getMetadata
compute.instanceGroupManagers.listMetadata
compute.instanceGroups.getMetadata
compute.instanceGroups.listMetadata
compute.instanceTemplates.getMetadata
compute.instanceTemplates.getIamPolicyMetadata
compute.instanceTemplates.listMetadata
compute.instances.getMetadata
compute.instances.getGuestAttributesMetadata
compute.instances.getIamPolicyMetadata
compute.instances.getSerialPortOutputMetadata
compute.instances.listMetadata
compute.instances.listReferrersMetadata
compute.licenseCodes.getMetadata
compute.licenseCodes.getIamPolicyMetadata
compute.licenseCodes.listMetadata
compute.licenses.getMetadata
compute.licenses.getIamPolicyMetadata
compute.licenses.listMetadata
compute.machineTypes.getMetadata
compute.machineTypes.listMetadata
compute.maintenancePolicies.getMetadata
compute.maintenancePolicies.getIamPolicyMetadata
compute.maintenancePolicies.listMetadata
compute.networks.getMetadata
compute.networks.listMetadata
compute.nodeGroups.getMetadata
compute.nodeGroups.getIamPolicyMetadata
compute.nodeGroups.listMetadata
compute.nodeTemplates.getMetadata
compute.nodeTemplates.getIamPolicyMetadata
compute.nodeTemplates.listMetadata
compute.nodeTypes.getMetadata
compute.nodeTypes.listMetadata
compute.projects.getMetadata
compute.regionOperations.getMetadata
compute.regionOperations.getIamPolicyMetadata
compute.regionOperations.listMetadata
compute.regions.getMetadata
compute.regions.listMetadata
compute.routers.getMetadata
compute.routers.listMetadata
compute.routes.getMetadata
compute.routes.listMetadata
compute.securityPolicies.getMetadata
compute.securityPolicies.getIamPolicyMetadata
compute.securityPolicies.listMetadata
compute.snapshots.getMetadata
compute.snapshots.listMetadata
compute.sslCertificates.getMetadata
compute.sslCertificates.listMetadata
compute.sslPolicies.getMetadata
compute.sslPolicies.listMetadata
compute.sslPolicies.listAvailableFeaturesMetadata
compute.subnetworks.getMetadata
compute.subnetworks.getIamPolicyMetadata
compute.subnetworks.listMetadata
compute.targetHttpProxies.getMetadata
compute.targetHttpProxies.listMetadata
compute.targetHttpsProxies.getMetadata
compute.targetHttpsProxies.listMetadata
compute.targetInstances.getMetadata
compute.targetInstances.listMetadata
compute.targetPools.getMetadata
compute.targetPools.listMetadata
compute.targetSslProxies.getMetadata
compute.targetSslProxies.listMetadata
compute.targetVpnGateways.getMetadata
compute.targetVpnGateways.listMetadata
compute.urlMaps.getMetadata
compute.urlMaps.listMetadata
compute.vpnTunnels.getMetadata
compute.vpnTunnels.listMetadata
compute.zoneOperations.getMetadata
compute.zoneOperations.listMetadata
compute.zones.getMetadata
compute.zones.listMetadata
resourcemanager.projects.getMetadata
serviceusage.quotas.getMetadata
serviceusage.services.getMetadata
Guardrails
Guardrails Hub
  • Hub
  • Docs
  • Blog
  • Changelog
Products
  • GuardrailsGuardrails
  • PipesPipes
  • SteampipeSteampipe
  • PowerpipePowerpipe
  • FlowpipeFlowpipe
  • TailpipeTailpipe
Turbot
  • Home
  • About us
  • We're hiring!
  • Contact us
Community

Our community of practitioners love to discuss cloud governance & security.

Slack logoJoin us on Slack →

System StatusLegalSecurity
Terms of UseSecurityPrivacy
39
Mods
123
Resource Types
2,217
Policies
1,091
Controls
118
Quick Actions
71
IAM