Turbot Guardrails Hub 
Hub
  • Mods
  • Policy Packs
  • Docs
  • Home
ModsPolicy PacksDocsHome
Mods
GCP
  • GCP/Admin
  • GCP/Metadata
  • GCP/App Engine/Admin
  • GCP/App Engine/Operator
  • GCP/App Engine/Metadata
  • GCP/BigQuery/Admin
  • GCP/BigQuery/Operator
  • GCP/BigQuery/Metadata
  • GCP/BigQuery Data Transfer/Admin
  • GCP/BigQuery Data Transfer/Metadata
  • GCP/Bigtable/Admin
  • GCP/Bigtable/Operator
  • GCP/Bigtable/Metadata
  • GCP/Build Service/Admin
  • GCP/Build Service/Metadata
  • GCP/Composer/Admin
  • GCP/Composer/Metadata
  • GCP/Compute Engine/Admin
  • GCP/Compute Engine/Operator
  • GCP/Compute Engine/ReadOnly
  • GCP/Compute Engine/Metadata
  • GCP/Data Catalog/Admin
  • GCP/Data Catalog/Metadata
  • GCP/Dataflow/Admin
  • GCP/Dataflow/Operator
  • GCP/Dataflow/Metadata
  • GCP/Datapipeline/Admin
  • GCP/Datapipeline/Metadata
  • GCP/Dataplex/Admin
  • GCP/Dataplex/Metadata
  • GCP/Dataproc/Admin
  • GCP/Dataproc/Operator
  • GCP/Dataproc/Metadata
  • GCP/DNS/Admin
  • GCP/DNS/Operator
  • GCP/DNS/Metadata
  • GCP/Firebase/Admin
  • GCP/Firebase/Operator
  • GCP/Firebase/Metadata
  • GCP/Functions/Admin
  • GCP/Functions/Operator
  • GCP/Functions/Metadata
  • GCP/IAM/Owner
  • GCP/IAM/Metadata
  • GCP/KMS/Admin
  • GCP/KMS/Operator
  • GCP/KMS/Metadata
  • GCP/Kubernetes Engine/Admin
  • GCP/Kubernetes Engine/Operator
  • GCP/Kubernetes Engine/Metadata
  • GCP/Logging/Admin
  • GCP/Logging/Metadata
  • GCP/Memorystore/Admin
  • GCP/Memorystore/Operator
  • GCP/Memorystore/Metadata
  • GCP/Model Armor/Admin
  • GCP/Model Armor/Metadata
  • GCP/Monitoring/Admin
  • GCP/Monitoring/Metadata
  • GCP/Network/Admin
  • GCP/Network/Operator
  • GCP/Network/Metadata
  • GCP/Notebooks/Admin
  • GCP/Notebooks/Operator
  • GCP/Notebooks/Metadata
  • GCP/OAuth/Admin
  • GCP/OAuth/Metadata
  • GCP/Pub/Sub/Admin
  • GCP/Pub/Sub/Operator
  • GCP/Pub/Sub/Metadata
  • GCP/Cloud Run/Admin
  • GCP/Cloud Run/Metadata
  • GCP/Scheduler/Admin
  • GCP/Scheduler/Operator
  • GCP/Scheduler/Metadata
  • GCP/Secret Manager/Admin
  • GCP/Secret Manager/Metadata
  • GCP/Spanner/Admin
  • GCP/Spanner/Operator
  • GCP/Spanner/Metadata
  • GCP/SQL/Admin
  • GCP/SQL/Operator
  • GCP/SQL/Metadata
  • GCP/Storage/Admin
  • GCP/Storage/Operator
  • GCP/Storage/Metadata
  • GCP/Vertex AI/Admin
  • GCP/Vertex AI/Metadata

IAM Role: GCP/Kubernetes Engine/Metadata

PermissionGrant
container.apiServices.getMetadata
container.apiServices.listMetadata
container.backendConfigs.getMetadata
container.backendConfigs.listMetadata
container.bindings.getMetadata
container.bindings.listMetadata
container.certificateSigningRequests.getMetadata
container.certificateSigningRequests.listMetadata
container.clusterRoleBindings.getMetadata
container.clusterRoleBindings.listMetadata
container.clusterRoles.getMetadata
container.clusterRoles.listMetadata
container.clusters.getMetadata
container.clusters.getCredentialsMetadata
container.clusters.listMetadata
container.componentStatuses.getMetadata
container.componentStatuses.listMetadata
container.configMaps.getMetadata
container.configMaps.listMetadata
container.controllerRevisions.getMetadata
container.controllerRevisions.listMetadata
container.cronJobs.getMetadata
container.cronJobs.getStatusMetadata
container.cronJobs.listMetadata
container.customResourceDefinitions.getMetadata
container.customResourceDefinitions.listMetadata
container.daemonSets.getMetadata
container.daemonSets.getStatusMetadata
container.daemonSets.listMetadata
container.deployments.getMetadata
container.deployments.getScaleMetadata
container.deployments.getStatusMetadata
container.deployments.listMetadata
container.endpoints.getMetadata
container.endpoints.listMetadata
container.events.getMetadata
container.events.listMetadata
container.horizontalPodAutoscalers.getMetadata
container.horizontalPodAutoscalers.getStatusMetadata
container.horizontalPodAutoscalers.listMetadata
container.ingresses.getMetadata
container.ingresses.getStatusMetadata
container.ingresses.listMetadata
container.initializerConfigurations.getMetadata
container.initializerConfigurations.listMetadata
container.jobs.getMetadata
container.jobs.getStatusMetadata
container.jobs.listMetadata
container.limitRanges.getMetadata
container.limitRanges.listMetadata
container.localSubjectAccessReviews.listMetadata
container.namespaces.getMetadata
container.namespaces.getStatusMetadata
container.namespaces.listMetadata
container.networkPolicies.getMetadata
container.networkPolicies.listMetadata
container.nodes.getMetadata
container.nodes.getStatusMetadata
container.nodes.listMetadata
container.operations.getMetadata
container.operations.listMetadata
container.persistentVolumeClaims.getMetadata
container.persistentVolumeClaims.getStatusMetadata
container.persistentVolumeClaims.listMetadata
container.persistentVolumes.getMetadata
container.persistentVolumes.getStatusMetadata
container.persistentVolumes.listMetadata
container.petSets.getMetadata
container.petSets.listMetadata
container.podDisruptionBudgets.getMetadata
container.podDisruptionBudgets.getStatusMetadata
container.podDisruptionBudgets.listMetadata
container.podPresets.getMetadata
container.podPresets.listMetadata
container.podSecurityPolicies.getMetadata
container.podSecurityPolicies.listMetadata
container.podTemplates.getMetadata
container.podTemplates.listMetadata
container.pods.getMetadata
container.pods.getLogsMetadata
container.pods.getStatusMetadata
container.pods.listMetadata
container.replicaSets.getMetadata
container.replicaSets.getScaleMetadata
container.replicaSets.getStatusMetadata
container.replicaSets.listMetadata
container.replicationControllers.getMetadata
container.replicationControllers.getScaleMetadata
container.replicationControllers.getStatusMetadata
container.replicationControllers.listMetadata
container.resourceQuotas.getMetadata
container.resourceQuotas.getStatusMetadata
container.resourceQuotas.listMetadata
container.roleBindings.getMetadata
container.roleBindings.listMetadata
container.roles.getMetadata
container.roles.listMetadata
container.scheduledJobs.getMetadata
container.scheduledJobs.listMetadata
container.secrets.getMetadata
container.secrets.listMetadata
container.selfSubjectAccessReviews.listMetadata
container.serviceAccounts.getMetadata
container.serviceAccounts.listMetadata
container.services.getMetadata
container.services.getStatusMetadata
container.services.listMetadata
container.statefulSets.getMetadata
container.statefulSets.getScaleMetadata
container.statefulSets.getStatusMetadata
container.statefulSets.listMetadata
container.storageClasses.getMetadata
container.storageClasses.listMetadata
container.subjectAccessReviews.listMetadata
container.thirdPartyObjects.getMetadata
container.thirdPartyObjects.listMetadata
container.thirdPartyResources.getMetadata
container.thirdPartyResources.listMetadata
resourcemanager.projects.getMetadata
compute.projects.getMetadata
serviceusage.quotas.getMetadata
serviceusage.services.getMetadata
serviceusage.services.listMetadata
Guardrails
Guardrails Hub
  • Hub
  • Docs
  • Blog
  • Changelog
Products
  • GuardrailsGuardrails
  • PipesPipes
  • SteampipeSteampipe
  • PowerpipePowerpipe
  • FlowpipeFlowpipe
  • TailpipeTailpipe
Turbot
  • Home
  • About us
  • We're hiring!
  • Contact us
Community

Our community of practitioners love to discuss cloud governance & security.

Slack logoJoin us on Slack →

System StatusLegalSecurity
Terms of UseSecurityPrivacy
39
Mods
151
Resource Types
2,578
Policies
1,245
Controls
118
Quick Actions
89
IAM