💼 1.6 Ensure that IAM users are not assigned the Service Account User or Service Account Token Creator roles at project level
- Contextual name: 💼 1.6 Ensure that IAM users are not assigned the Service Account User or Service Account Token Creator roles at project level
- ID:
/frameworks/cis-gcp-v1.1.0/01/06 - Located in: 💼 1 Identity and Access Management
Description​
It is recommended to assign the 'Service Account User (iam.serviceAccountUser)' and 'Service Account Token Creator (iam.serviceAccountTokenCreator)' roles to a user for a specific service account rather than assigning the role to a user at project level.
Similar​
- Internal
- ID:
dec-c-7c2e4c3c
- ID:
Sub Sections​
| Section | Sub Sections | Internal Rules | Policies | Flags |
|---|