Policy: GCP > CIS v2.0 > 1 - Identity and Access Management > 1.05 - Ensure That Service Account Has No Admin Privileges
Configures auditing against a CIS Benchmark item.
Level: 1
A service account is a special Google account that belongs to an application or a VM, instead of to an individual end-user. The application uses the service account to call the service's Google API so that users aren't directly involved. It's recommended not to use admin access for ServiceAccount.
Resource Types
This policy targets the following resource types:
Primary Policy
This policy is used with the following primary policy:
Controls
- GCP > CIS v2.0
- GCP > CIS v2.0 > 1 - Identity and Access Management > 1.05 - Ensure That Service Account Has No Admin Privileges
- GCP > CIS v2.0 > 1 - Identity and Access Management
Policy Specification
Schema Type |
|
---|---|
Default |
|
Valid Values [YAML] |
|
Category
In Your Workspace
Developers
- tmod:@turbot/cis#/control/categories/v070403
- tmod:@turbot/gcp-cisv2-0#/policy/types/r0105
- turbot graphql policy-type --id "tmod:@turbot/gcp-cisv2-0#/policy/types/r0105"
- turbot graphql policy-settings --filter "policyTypeId:tmod:@turbot/gcp-cisv2-0#/policy/types/r0105"
Get Policy TypeGet Policy Settings
Category URI
Policy Type URI
GraphQL
CLI