Turbot Guardrails Hub 
Hub
  • Mods
  • Policy Packs
  • Docs
  • Home
ModsPolicy PacksDocsHome
Mods
GCP
  • GCP/Admin
  • GCP/Metadata
  • GCP/App Engine/Admin
  • GCP/App Engine/Operator
  • GCP/App Engine/Metadata
  • GCP/BigQuery/Admin
  • GCP/BigQuery/Operator
  • GCP/BigQuery/Metadata
  • GCP/BigQuery Data Transfer/Admin
  • GCP/BigQuery Data Transfer/Metadata
  • GCP/Bigtable/Admin
  • GCP/Bigtable/Operator
  • GCP/Bigtable/Metadata
  • GCP/Build Service/Admin
  • GCP/Build Service/Metadata
  • GCP/Composer/Admin
  • GCP/Composer/Metadata
  • GCP/Data Catalog/Admin
  • GCP/Data Catalog/Metadata
  • GCP/Dataflow/Admin
  • GCP/Dataflow/Operator
  • GCP/Dataflow/Metadata
  • GCP/Datapipeline/Admin
  • GCP/Datapipeline/Metadata
  • GCP/Dataplex/Admin
  • GCP/Dataplex/Metadata
  • GCP/Dataproc/Admin
  • GCP/Dataproc/Operator
  • GCP/Dataproc/Metadata
  • GCP/DNS/Admin
  • GCP/DNS/Operator
  • GCP/DNS/Metadata
  • GCP/Firebase/Admin
  • GCP/Firebase/Operator
  • GCP/Firebase/Metadata
  • GCP/Functions/Admin
  • GCP/Functions/Operator
  • GCP/Functions/Metadata
  • GCP/IAM/Owner
  • GCP/IAM/Metadata
  • GCP/KMS/Admin
  • GCP/KMS/Operator
  • GCP/KMS/Metadata
  • GCP/Kubernetes Engine/Admin
  • GCP/Kubernetes Engine/Operator
  • GCP/Kubernetes Engine/Metadata
  • GCP/Logging/Admin
  • GCP/Logging/Metadata
  • GCP/Memorystore/Admin
  • GCP/Memorystore/Operator
  • GCP/Memorystore/Metadata
  • GCP/Monitoring/Admin
  • GCP/Monitoring/Metadata
  • GCP/Network/Admin
  • GCP/Network/Operator
  • GCP/Network/Metadata
  • GCP/Notebooks/Admin
  • GCP/Notebooks/Operator
  • GCP/Notebooks/Metadata
  • GCP/OAuth/Admin
  • GCP/OAuth/Metadata
  • GCP/Pub/Sub/Admin
  • GCP/Pub/Sub/Operator
  • GCP/Pub/Sub/Metadata
  • GCP/Cloud Run/Admin
  • GCP/Cloud Run/Metadata
  • GCP/Scheduler/Admin
  • GCP/Scheduler/Operator
  • GCP/Scheduler/Metadata
  • GCP/Secret Manager/Admin
  • GCP/Secret Manager/Metadata
  • GCP/Spanner/Admin
  • GCP/Spanner/Operator
  • GCP/Spanner/Metadata
  • GCP/SQL/Admin
  • GCP/SQL/Operator
  • GCP/SQL/Metadata
  • GCP/Storage/Admin
  • GCP/Storage/Operator
  • GCP/Storage/Metadata
  • GCP/Vertex AI/Admin
  • GCP/Vertex AI/Metadata

IAM Role: GCP/Network/Admin

PermissionGrant
compute.addresses.createAdmin
compute.addresses.createInternalAdmin
compute.addresses.deleteAdmin
compute.addresses.deleteInternalAdmin
compute.addresses.useAdmin
compute.addresses.useInternalAdmin
compute.backendBuckets.createAdmin
compute.backendBuckets.deleteAdmin
compute.backendBuckets.updateAdmin
compute.backendBuckets.useAdmin
compute.backendServices.createAdmin
compute.backendServices.deleteAdmin
compute.backendServices.setSecurityPolicyAdmin
compute.backendServices.updateAdmin
compute.backendServices.useAdmin
compute.firewalls.createAdmin
compute.firewalls.deleteAdmin
compute.firewalls.updateAdmin
compute.forwardingRules.createAdmin
compute.forwardingRules.deleteAdmin
compute.forwardingRules.setTargetAdmin
compute.globalAddresses.createAdmin
compute.globalAddresses.createInternalAdmin
compute.globalAddresses.deleteAdmin
compute.globalAddresses.deleteInternalAdmin
compute.globalAddresses.useAdmin
compute.globalForwardingRules.createAdmin
compute.globalForwardingRules.deleteAdmin
compute.networks.addPeeringAdmin
compute.networks.createAdmin
compute.networks.deleteAdmin
compute.networks.removePeeringAdmin
compute.networks.switchToCustomModeAdmin
compute.networks.updateAdmin
compute.networks.updatePolicyAdmin
compute.networks.useAdmin
compute.networks.useExternalIpAdmin
compute.packetMirrorings.createAdmin
compute.packetMirrorings.deleteAdmin
compute.routers.createAdmin
compute.routers.deleteAdmin
compute.routers.updateAdmin
compute.routers.useAdmin
compute.routes.createAdmin
compute.routes.deleteAdmin
compute.subnetworks.createAdmin
compute.subnetworks.deleteAdmin
compute.subnetworks.expandIpCidrRangeAdmin
compute.subnetworks.setIamPolicyAdmin
compute.subnetworks.setPrivateIpGoogleAccessAdmin
compute.subnetworks.updateAdmin
compute.subnetworks.updatePolicyAdmin
compute.subnetworks.useAdmin
compute.subnetworks.useExternalIpAdmin
compute.targetSslProxies.createAdmin
compute.targetSslProxies.deleteAdmin
compute.targetSslProxies.setBackendServiceAdmin
compute.targetHttpsProxies.createAdmin
compute.targetHttpsProxies.deleteAdmin
compute.sslCertificates.createAdmin
compute.sslCertificates.deleteAdmin
compute.targetPools.createAdmin
compute.targetPools.deleteAdmin
compute.targetPools.removeHealthCheckAdmin
compute.targetPools.removeInstanceAdmin
compute.targetPools.updateAdmin
compute.targetPools.useAdmin
compute.targetVpnGateways.createAdmin
compute.targetVpnGateways.deleteAdmin
compute.targetVpnGateways.setLabelsAdmin
compute.targetVpnGateways.updateAdmin
compute.targetVpnGateways.useAdmin
compute.urlMaps.createAdmin
compute.urlMaps.deleteAdmin
compute.urlMaps.invalidateCacheAdmin
compute.urlMaps.useAdmin
compute.urlMaps.validateAdmin
compute.vpnTunnels.createAdmin
compute.vpnTunnels.deleteAdmin
compute.addresses.setLabelsOperator
compute.forwardingRules.setLabelsOperator
compute.globalAddresses.setLabelsOperator
compute.globalForwardingRules.setLabelsOperator
compute.globalForwardingRules.setTargetOperator
compute.packetMirrorings.updateOperator
compute.targetHttpsProxies.setUrlMapOperator
compute.urlMaps.updateOperator
compute.vpnTunnels.setLabelsOperator
compute.addresses.getMetadata
compute.addresses.listMetadata
compute.backendBuckets.getMetadata
compute.backendBuckets.listMetadata
compute.backendServices.getMetadata
compute.backendServices.listMetadata
compute.firewalls.getMetadata
compute.firewalls.listMetadata
compute.forwardingRules.getMetadata
compute.forwardingRules.listMetadata
compute.globalAddresses.getMetadata
compute.globalAddresses.listMetadata
compute.globalForwardingRules.getMetadata
compute.globalForwardingRules.listMetadata
compute.interconnectAttachments.getMetadata
compute.interconnectAttachments.listMetadata
compute.interconnectLocations.getMetadata
compute.interconnectLocations.listMetadata
compute.interconnects.getMetadata
compute.interconnects.listMetadata
compute.networks.getMetadata
compute.networks.listMetadata
compute.packetMirrorings.getMetadata
compute.packetMirrorings.listMetadata
compute.regionBackendServices.getMetadata
compute.regionBackendServices.listMetadata
compute.routers.getMetadata
compute.routers.listMetadata
compute.routes.getMetadata
compute.routes.listMetadata
compute.subnetworks.getMetadata
compute.subnetworks.getIamPolicyMetadata
compute.subnetworks.listMetadata
compute.sslCertificates.getMetadata
compute.sslCertificates.listMetadata
compute.targetTcpProxies.getMetadata
compute.targetTcpProxies.listMetadata
compute.targetPools.getMetadata
compute.targetPools.listMetadata
compute.targetVpnGateways.getMetadata
compute.targetVpnGateways.listMetadata
compute.urlMaps.getMetadata
compute.urlMaps.listMetadata
compute.vpnTunnels.getMetadata
compute.vpnTunnels.listMetadata
servicenetworking.services.getMetadata
serviceusage.services.listMetadata
Guardrails
Guardrails Hub
  • Hub
  • Docs
  • Blog
  • Changelog
Products
  • GuardrailsGuardrails
  • PipesPipes
  • SteampipeSteampipe
  • PowerpipePowerpipe
  • FlowpipeFlowpipe
  • TailpipeTailpipe
Turbot
  • Home
  • About us
  • We're hiring!
  • Contact us
Community

Our community of practitioners love to discuss cloud governance & security.

Slack logoJoin us on Slack →

System StatusLegalSecurity
Terms of UseSecurityPrivacy
39
Mods
130
Resource Types
2,226
Policies
1,100
Controls
35
Quick Actions
83
IAM