Skip to main content

💼 1.6 Ensure that IAM users are not assigned the Service Account User or Service Account Token Creator roles at project level

  • Contextual name: 💼 1.6 Ensure that IAM users are not assigned the Service Account User or Service Account Token Creator roles at project level
  • ID: /frameworks/cis-gcp-v1.1.0/01/06
  • Located in: 💼 1 Identity and Access Management

Description​

It is recommended to assign the 'Service Account User (iam.serviceAccountUser)' and 'Service Account Token Creator (iam.serviceAccountTokenCreator)' roles to a user for a specific service account rather than assigning the role to a user at project level.

Similar​

  • Internal
    • ID: dec-c-7c2e4c3c

Sub Sections​

SectionSub SectionsInternal RulesPoliciesFlags