The IAM Privilege Catalogservices / Google Cloud / Compute Engine disks
Read and edit Compute Engine disks and disk assignments.
Multiple organizational functions may often reside within Compute Engine.
compute.disks.createSnapshot
When combined with the ability to read disk images, can allow access to disk data.
Risks
Scope: HIGH
This privilege may grant access to sensitive data from a single organizational function, or allow interruption of a service supporting a single organizational function.
Links
Contributed by P0 Security
© 2023–present P0 Security and contributors to the IAM Privilege Catalog