2022-11-11 08:47:27 -08:00
|
|
|
org_policies = {
|
|
|
|
"iam.disableServiceAccountKeyCreation" = {
|
2023-02-21 03:24:40 -08:00
|
|
|
rules = [{ enforce = true }]
|
2022-11-11 08:47:27 -08:00
|
|
|
}
|
|
|
|
"iam.disableServiceAccountKeyUpload" = {
|
|
|
|
rules = [
|
|
|
|
{
|
|
|
|
condition = {
|
|
|
|
expression = "resource.matchTagId(aa, bb)"
|
|
|
|
title = "condition"
|
|
|
|
description = "test condition"
|
|
|
|
location = "xxx"
|
|
|
|
}
|
|
|
|
enforce = true
|
2023-02-21 03:24:40 -08:00
|
|
|
},
|
|
|
|
{
|
|
|
|
enforce = false
|
2022-11-11 08:47:27 -08:00
|
|
|
}
|
|
|
|
]
|
|
|
|
}
|
|
|
|
}
|