Cloud Security Rules

Find out if you have vulnerabilities that put you at risk

RULE	SERVICE GROUP
H Service account has admin privileges	IAM
M IAM default audit log config does not include 'DATA_READ' and 'DATA_WRITE' log types	IAM
M IAM permission assigned to user	IAM
M IAM user has privileged roles at project level	IAM
M IAM users should not have both KMS admin and any of the KMS encrypter/decrypter roles.	IAM
M Logging metric filter and alert for custom role changes are not configured	IAM