it sounds like it's enough to do this, but this is not the only one to look at

…ns that permission and then grant themselves any role they want. In other words, you must …ns that permission and then grant themselves any role they want. In other words, you must make sure projectIamAdmin is never listed inside the hasOnly() call of the IAM condition.

Managing GCP service usage through delegated role grants

Julio Castillo

Julio Diez

Sep 22, 2021

it sounds like it's enough to do this, but this is not the only one to look at

Sign up to discover human stories that deepen your understanding of the world.

Free

Distraction-free reading. No ads.

Organize your knowledge with lists and highlights.

Tell your story. Find your audience.

Membership

Read member-only stories

Support writers you read most

Earn money for your writing

Listen to audio narrations

Read offline with the Medium app

Written by Julio Diez

339 Followers

11 Following

Strategic Cloud Engineer at Google Cloud, focused on Networking and Security

Responses (1)

Write a response

What are your thoughts?

Also publish to my profile

Julio Castillo

Sep 22, 2021

true. removed that sentence

Help
Status
About
Careers
Press
Blog
Privacy
Terms
Text to speech
Teams