Policy: GCP > CIS v2.0 > 4 - Virtual Machines > 4.01 - Ensure That Instances Are Not Configured To Use the Default Service Account
Configures auditing against a CIS Benchmark item.
Level: 1
It is recommended to configure your instance to not use the default Compute Engine service account because it has the Editor role on the project.
Targets
This policy targets the following resource types:
Primary Policy
This policy is used with the following primary policy:
Policy Specification
Schema Type |
|
---|---|
Default |
|
Valid Values [YAML] |
|
Category
In Your Workspace
Developers
- tmod:@turbot/cis#/control/categories/v070407
- tmod:@turbot/gcp-cisv2-0#/policy/types/r0401
- turbot graphql policy-type --id "tmod:@turbot/gcp-cisv2-0#/policy/types/r0401"
- turbot graphql policy-settings --filter "policyTypeId:tmod:@turbot/gcp-cisv2-0#/policy/types/r0401"
Get Policy TypeGet Policy Settings
Category URI
Policy Type URI
GraphQL
CLI