cloud-foundation-fabric/blueprints/data-solutions/shielded-folder/data/org-policies/iam.yaml

16 lines
309 B
YAML

# skip boilerplate check
#
# sample subset of useful organization policies, edit to suit requirements
iam.automaticIamGrantsForDefaultServiceAccounts:
rules:
- enforce: true
iam.disableServiceAccountKeyCreation:
rules:
- enforce: true
iam.disableServiceAccountKeyUpload:
rules:
- enforce: true