GCP IAM Updates Detected

jdyke · Mar 1, 2024 · 2f7dcd4 · 2f7dcd4
1 parent 4c810be
commit 2f7dcd4
Show file tree

Hide file tree

Showing 32 changed files with 972 additions and 24 deletions.
diff --git a/roles/alloydb.admin b/roles/alloydb.admin
@@ -20,6 +20,7 @@
     "alloydb.clusters.list",
     "alloydb.clusters.listEffectiveTags",
     "alloydb.clusters.listTagBindings",
+    "alloydb.clusters.promote",
     "alloydb.clusters.update",
     "alloydb.databases.list",
     "alloydb.instances.connect",

diff --git a/roles/apigee.admin b/roles/apigee.admin
@@ -219,6 +219,10 @@
     "apigee.securityActions.update",
     "apigee.securityActionsConfig.get",
     "apigee.securityActionsConfig.update",
+    "apigee.securityFeedback.create",
+    "apigee.securityFeedback.delete",
+    "apigee.securityFeedback.get",
+    "apigee.securityFeedback.list",
     "apigee.securityIncidents.get",
     "apigee.securityIncidents.list",
     "apigee.securityIncidents.update",

diff --git a/roles/apigee.readOnlyAdmin b/roles/apigee.readOnlyAdmin
@@ -99,6 +99,8 @@
     "apigee.securityActions.get",
     "apigee.securityActions.list",
     "apigee.securityActionsConfig.get",
+    "apigee.securityFeedback.get",
+    "apigee.securityFeedback.list",
     "apigee.securityIncidents.get",
     "apigee.securityIncidents.list",
     "apigee.securityProfileEnvironments.computeScore",

diff --git a/roles/apigee.securityAdmin b/roles/apigee.securityAdmin
@@ -22,6 +22,10 @@
     "apigee.securityActions.update",
     "apigee.securityActionsConfig.get",
     "apigee.securityActionsConfig.update",
+    "apigee.securityFeedback.create",
+    "apigee.securityFeedback.delete",
+    "apigee.securityFeedback.get",
+    "apigee.securityFeedback.list",
     "apigee.securityIncidents.get",
     "apigee.securityIncidents.list",
     "apigee.securityIncidents.update",

diff --git a/roles/apigee.securityViewer b/roles/apigee.securityViewer
@@ -18,6 +18,8 @@
     "apigee.securityActions.get",
     "apigee.securityActions.list",
     "apigee.securityActionsConfig.get",
+    "apigee.securityFeedback.get",
+    "apigee.securityFeedback.list",
     "apigee.securityIncidents.get",
     "apigee.securityIncidents.list",
     "apigee.securityProfileEnvironments.computeScore",

diff --git a/roles/bigquerycontinuousquery.serviceAgent b/roles/bigquerycontinuousquery.serviceAgent
@@ -0,0 +1,10 @@
+{
+  "description": "Gives BigQuery Continuous Query access to the service accounts in the user project.",
+  "etag": "AA==",
+  "includedPermissions": [
+    "iam.serviceAccounts.getAccessToken"
+  ],
+  "name": "roles/bigquerycontinuousquery.serviceAgent",
+  "stage": "ALPHA",
+  "title": "BigQuery Continuous Query Service Agent"
+}