IAM misconfigurations

Service Account with Administrative Privileges within Resource Scope

Risk Level

Informational (4)

Platform(s)
Compliance Frameworks

Description

The Service account '{GcpIamServiceAccount}' was granted an administrative role ({GcpIamServiceAccount.PolicyBindings.Role}) at the resource level ({GcpIamServiceAccount.PolicyBindings.Policy.Scope}). This role allows the service account to perform all actions on the resource. Service accounts should be provided only with the permissions they require. If the service account does not require all actions, this role should be replaced with a less privileged one

  • Recommended Mitigation

    It is recommended to provide a service account with only the necessary permissions. Evaluate the service account's permissions and consider removing the binding to {GcpIamServiceAccount.PolicyBindings.Role}

Need help?

Get a free Security Risk Assessment. Start today

See Orca in action See Orca in action-> View a 10 minute recorded demo or sign up for a personalized one-on-one walk-through.