services / Google Cloud / Google Cloud Service

Includes all services and APIs offered as part of Google Cloud Platform.

serviceusage.​services.​enable

Depends on the service. The attacker could enable a service that contains risks (such as an overprovisioned default service account) that allows themselves to escalate permissions.

Risks

1. Lateral movement (BOOST)

Scope: CRITICAL

This privilege may grant access to sensitive data from a significant fraction of organizational functions, allow interruption of critical organizational services, or its exploit could lead to significant privilege escalation.

Links