💼 4.2 Ensure that instances are not configured to use the default service account with full access to all Cloud APIs
- ID:
/frameworks/cis-gcp-v1.1.0/04/02
Description​
To support principle of least privileges and prevent potential privilege escalation it is recommended that instances are not assigned to default service account 'Compute Engine default service account' with Scope 'Allow full access to all Cloud APIs'.
Similar​
- Internal
- ID:
dec-c-e4dbe585
- ID:
Sub Sections​
| Section | Sub Sections | Internal Rules | Policies | Flags | Compliance |
|---|