GCP IAM Service account does have admin privileges misconfiguration detected in code

Rule Details

Cortex AppSec Rule ID	APPSEC_GCP_42
Category - Subcategory	IAM - Overly Permissive
Provider	GCP
Severity	HIGH
Framework	Terraform, Terraform Plan

Impact

Ensure that Service Account has no Admin privileges

How to Fix

Resource: google_project_iam_member

• Arguments: role + member [source,go]

---

resource "google_project_iam_member" "project" { project = "your-project-id"

• role = "roles/owner"
• member = "user:[e-mail]" }

---