Files
hunfabric/blueprints/data-solutions/shielded-folder/data/org-policies/iam.yaml
2023-02-21 15:49:16 +01:00

16 lines
309 B
YAML

# skip boilerplate check
#
# sample subset of useful organization policies, edit to suit requirements
iam.automaticIamGrantsForDefaultServiceAccounts:
rules:
- enforce: true
iam.disableServiceAccountKeyCreation:
rules:
- enforce: true
iam.disableServiceAccountKeyUpload:
rules:
- enforce: true