cloud-foundation-fabric/fast/stages/0-bootstrap/data/org-policies/iam.yaml

# skip boilerplate check
#
# sample subset of useful organization policies, edit to suit requirements

iam.automaticIamGrantsForDefaultServiceAccounts:
  rules:
  - enforce: true

iam.disableServiceAccountKeyCreation:
  rules:
  - enforce: true

iam.disableServiceAccountKeyUpload:
  rules:
  - enforce: true
Use org policy factory for resman stage 2022-11-03 05:07:27 -07:00			`# skip boilerplate check`
			`#`
			`# sample subset of useful organization policies, edit to suit requirements`

			`iam.automaticIamGrantsForDefaultServiceAccounts:`
Update yaml org policies 2023-02-21 04:58:08 -08:00			`rules:`
			`- enforce: true`
Use org policy factory for resman stage 2022-11-03 05:07:27 -07:00
			`iam.disableServiceAccountKeyCreation:`
Update yaml org policies 2023-02-21 04:58:08 -08:00			`rules:`
			`- enforce: true`
Use org policy factory for resman stage 2022-11-03 05:07:27 -07:00
			`iam.disableServiceAccountKeyUpload:`
Update yaml org policies 2023-02-21 04:58:08 -08:00			`rules:`
			`- enforce: true`