Turbot Guardrails Hub 
Hub
Policy Packs
GCP CIS v2.0.0 - Section 1 - Identity and Access Management
Overview
19
Policy Settings
0
Variables
DevelopersGithub

Policy Setting: GCP > IAM > Service Account Key > Approved

Policies

This policy setting is dependent on the following policy types:

Source

resource "turbot_policy_setting" "gcp_iam_service_account_key_approved" {
  resource = turbot_policy_pack.main.id
  type     = "tmod:@turbot/gcp-iam#/policy/types/serviceAccountKeyApproved"
  note     = "GCP CIS v2.0.0 - Control: 1.4"
  value    = "Check: Approved"
  # value    = "Enforce: Delete unapproved if new"
}