services / Google Cloud / IAM Policy Recommendations

IAM Policy Recommendations include changes to the IAM policies of your projects suggested by Google in order to improve your security posture.

These recommendations include sensitive information about your project-level IAM policies, as well as exposing information about users, groups, and service accounts.

recommender.​iamPolicyRecommendations.​get

Risks

1. Account discovery (LOW)
2. Policy discovery (LOW)

Scope: HIGH

This privilege may grant access to sensitive data from a single organizational function, or allow interruption of a service supporting a single organizational function.

Links