Skip to content

Latest commit

 

History

History
19 lines (13 loc) · 731 Bytes

service-account-admin.md

File metadata and controls

19 lines (13 loc) · 731 Bytes

CloudSploit

GOOGLE / IAM / Service Account Admin

Quick Info

Plugin Title Service Account Admin
Cloud GOOGLE
Category IAM
Description Ensures that user managed service accounts do not have any admin, owner, or write privileges.
More Info Service accounts are primarily used for API access to Google. It is recommended to not use admin access for service accounts.
GOOGLE Link https://cloud.google.com/iam/docs/overview
Recommended Action Ensure that no service accounts have admin, owner, or write privileges.

Detailed Remediation Steps