Policy: GCP > Turbot > Permissions > Compiled > Service Permissions

Targets

This policy targets the following resource types:

• GCP > Project

Primary Policy

This policy is used with the following primary policy:

• GCP > Turbot > Permissions > Compiled

Related Policies

• @turbot/gcp-appengine
• @turbot/gcp-bigquery
• @turbot/gcp-bigquerydatatransfer
• @turbot/gcp-bigtable
• @turbot/gcp-build
• @turbot/gcp-composer
• @turbot/gcp-computeengine
• @turbot/gcp-datacatalog
• @turbot/gcp-dataflow
• @turbot/gcp-datapipeline
• @turbot/gcp-dataplex
• @turbot/gcp-dataproc
• @turbot/gcp-dns
• @turbot/gcp-firebase
• @turbot/gcp-functions
• @turbot/gcp-iam
• @turbot/gcp-kms
• @turbot/gcp-kubernetesengine
• @turbot/gcp-logging
• @turbot/gcp-memorystore
• @turbot/gcp-monitoring
• @turbot/gcp-network
• @turbot/gcp-notebooks
• @turbot/gcp-oauth
• @turbot/gcp-pubsub
• @turbot/gcp-run
• @turbot/gcp-scheduler
• @turbot/gcp-secretmanager
• @turbot/gcp-spanner
• @turbot/gcp-sql
• @turbot/gcp-storage
• @turbot/gcp-vertexai

Policy Specification

array

Category

• IAM > Permissions

In Your Workspace

• Policy Settings by Type report

Developers

Category URI

tmod:@turbot/turbot#/control/categories/iamPermissions

Policy Type URI

tmod:@turbot/gcp-iam#/policy/types/iamPermissionsCompiledServicePermissions

GraphQL

query policyType(id: "tmod:@turbot/gcp-iam#/policy/types/iamPermissionsCompiledServicePermissions") { … }

query policySettings(filter: "policyTypeId:'tmod:@turbot/gcp-iam#/policy/types/iamPermissionsCompiledServicePermissions'") { … }

query policyValues(filter: "policyTypeId:'tmod:@turbot/gcp-iam#/policy/types/iamPermissionsCompiledServicePermissions'") { … }

CLI

Get Policy Type

turbot graphql policy-type --id "tmod:@turbot/gcp-iam#/policy/types/iamPermissionsCompiledServicePermissions"

Get Policy Settings

turbot graphql policy-settings --filter "policyTypeId:tmod:@turbot/gcp-iam#/policy/types/iamPermissionsCompiledServicePermissions"