Decrease the role level of the backup-exporter SA

gpii-ops · Apr 3, 2019 · b1f4d90 · b1f4d90
1 parent aff52e0
commit b1f4d90
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/common/modules/gcp-project/main.tf b/common/modules/gcp-project/main.tf
@@ -219,7 +219,7 @@ data "google_iam_policy" "combined" {
   }
 
   binding {
-    role = "roles/owner"
+    role = "roles/viewer"
 
     members = [
       "${local.backup_service_accounts}",