cloudbuild.connections.getIamPolicy – 2 risks

The IAM Privilege Catalog

services / Google Cloud / Cloud Build Connection

A Cloud build connection is a connection to an external Source Code Management system, like Github and Gitlab.

cloudbuild.connections.getIamPolicy

Risks

Account discovery (LOW)
Policy discovery (LOW)

Scope: MEDIUM

This privilege may grant access to confidential data, or its exploit can incur operational cost.

Links

https://cloud.google.com/build/docs/iam-roles-permissions

https://cloud.google.com/sdk/gcloud/reference/alpha/builds/connections

https://cloud.google.com/build/docs/api/reference/rest/v2/projects.locations.connections

Contributed by P0 Security

© 2023–present P0 Security and contributors to the IAM Privilege Catalog