services / Google Cloud / Cloud Asset Insights

Cloud Asset Insights include changes to the IAM policies of your resources suggested by Google in order to improve your security posture

These insights include sensitive information about your Google Cloud resources and their IAM policies, as well as exposing information about users, groups, and service accounts.

recommender.​cloudAssetInsights.​list

Risks

1. Account discovery (LOW)
2. Infrastructure discovery (LOW)
3. Policy discovery (LOW)

Scope: HIGH

This privilege may grant access to sensitive data from a single organizational function, or allow interruption of a service supporting a single organizational function.

Links