GCP IAM Updates Detected

jdyke · May 13, 2024 · ffea8fa · ffea8fa
1 parent 570b60a
commit ffea8fa
Show file tree

Hide file tree

Showing 10 changed files with 54 additions and 0 deletions.
diff --git a/roles/backupdr.computeEngineOperator b/roles/backupdr.computeEngineOperator
@@ -2,6 +2,7 @@
   "description": "Allows a Backup and DR service account to discover, back up, and restore Compute Engine VM instances.",
   "etag": "AA==",
   "includedPermissions": [
+    "backupdr.managementServers.createConnection",
     "compute.addresses.list",
     "compute.addresses.use",
     "compute.diskTypes.get",

diff --git a/roles/clouddeploy.admin b/roles/clouddeploy.admin
@@ -19,10 +19,14 @@
     "clouddeploy.customTargetTypes.setIamPolicy",
     "clouddeploy.customTargetTypes.update",
     "clouddeploy.deliveryPipelines.create",
+    "clouddeploy.deliveryPipelines.createTagBinding",
     "clouddeploy.deliveryPipelines.delete",
+    "clouddeploy.deliveryPipelines.deleteTagBinding",
     "clouddeploy.deliveryPipelines.get",
     "clouddeploy.deliveryPipelines.getIamPolicy",
     "clouddeploy.deliveryPipelines.list",
+    "clouddeploy.deliveryPipelines.listEffectiveTags",
+    "clouddeploy.deliveryPipelines.listTagBindings",
     "clouddeploy.deliveryPipelines.setIamPolicy",
     "clouddeploy.deliveryPipelines.update",
     "clouddeploy.jobRuns.get",
@@ -49,10 +53,14 @@
     "clouddeploy.rollouts.retryJob",
     "clouddeploy.rollouts.rollback",
     "clouddeploy.targets.create",
+    "clouddeploy.targets.createTagBinding",
     "clouddeploy.targets.delete",
+    "clouddeploy.targets.deleteTagBinding",
     "clouddeploy.targets.get",
     "clouddeploy.targets.getIamPolicy",
     "clouddeploy.targets.list",
+    "clouddeploy.targets.listEffectiveTags",
+    "clouddeploy.targets.listTagBindings",
     "clouddeploy.targets.setIamPolicy",
     "clouddeploy.targets.update",
     "resourcemanager.projects.get",

diff --git a/roles/clouddeploy.developer b/roles/clouddeploy.developer
@@ -8,10 +8,14 @@
     "clouddeploy.automations.list",
     "clouddeploy.config.get",
     "clouddeploy.deliveryPipelines.create",
+    "clouddeploy.deliveryPipelines.createTagBinding",
     "clouddeploy.deliveryPipelines.delete",
+    "clouddeploy.deliveryPipelines.deleteTagBinding",
     "clouddeploy.deliveryPipelines.get",
     "clouddeploy.deliveryPipelines.getIamPolicy",
     "clouddeploy.deliveryPipelines.list",
+    "clouddeploy.deliveryPipelines.listEffectiveTags",
+    "clouddeploy.deliveryPipelines.listTagBindings",
     "clouddeploy.deliveryPipelines.update",
     "clouddeploy.jobRuns.get",
     "clouddeploy.jobRuns.list",

diff --git a/roles/clouddeploy.operator b/roles/clouddeploy.operator
@@ -15,10 +15,14 @@
     "clouddeploy.customTargetTypes.getIamPolicy",
     "clouddeploy.customTargetTypes.list",
     "clouddeploy.deliveryPipelines.create",
+    "clouddeploy.deliveryPipelines.createTagBinding",
     "clouddeploy.deliveryPipelines.delete",
+    "clouddeploy.deliveryPipelines.deleteTagBinding",
     "clouddeploy.deliveryPipelines.get",
     "clouddeploy.deliveryPipelines.getIamPolicy",
     "clouddeploy.deliveryPipelines.list",
+    "clouddeploy.deliveryPipelines.listEffectiveTags",
+    "clouddeploy.deliveryPipelines.listTagBindings",
     "clouddeploy.deliveryPipelines.update",
     "clouddeploy.jobRuns.get",
     "clouddeploy.jobRuns.list",
@@ -43,10 +47,14 @@
     "clouddeploy.rollouts.retryJob",
     "clouddeploy.rollouts.rollback",
     "clouddeploy.targets.create",
+    "clouddeploy.targets.createTagBinding",
     "clouddeploy.targets.delete",
+    "clouddeploy.targets.deleteTagBinding",
     "clouddeploy.targets.get",
     "clouddeploy.targets.getIamPolicy",
     "clouddeploy.targets.list",
+    "clouddeploy.targets.listEffectiveTags",
+    "clouddeploy.targets.listTagBindings",
     "clouddeploy.targets.update",
     "resourcemanager.projects.get",
     "resourcemanager.projects.list"

diff --git a/roles/clouddeploy.viewer b/roles/clouddeploy.viewer
@@ -13,6 +13,8 @@
     "clouddeploy.deliveryPipelines.get",
     "clouddeploy.deliveryPipelines.getIamPolicy",
     "clouddeploy.deliveryPipelines.list",
+    "clouddeploy.deliveryPipelines.listEffectiveTags",
+    "clouddeploy.deliveryPipelines.listTagBindings",
     "clouddeploy.jobRuns.get",
     "clouddeploy.jobRuns.list",
     "clouddeploy.locations.get",
@@ -26,6 +28,8 @@
     "clouddeploy.targets.get",
     "clouddeploy.targets.getIamPolicy",
     "clouddeploy.targets.list",
+    "clouddeploy.targets.listEffectiveTags",
+    "clouddeploy.targets.listTagBindings",
     "resourcemanager.projects.get",
     "resourcemanager.projects.list"
   ],

diff --git a/roles/editor b/roles/editor
@@ -1075,6 +1075,7 @@
     "backupdr.managementServers.assignBackupPlans",
     "backupdr.managementServers.backupAccess",
     "backupdr.managementServers.create",
+    "backupdr.managementServers.createConnection",
     "backupdr.managementServers.createDynamicProtection",
     "backupdr.managementServers.delete",
     "backupdr.managementServers.deleteDynamicProtection",
@@ -1897,6 +1898,8 @@
     "clouddeploy.deliveryPipelines.get",
     "clouddeploy.deliveryPipelines.getIamPolicy",
     "clouddeploy.deliveryPipelines.list",
+    "clouddeploy.deliveryPipelines.listEffectiveTags",
+    "clouddeploy.deliveryPipelines.listTagBindings",
     "clouddeploy.deliveryPipelines.update",
     "clouddeploy.jobRuns.get",
     "clouddeploy.jobRuns.list",
@@ -1926,6 +1929,8 @@
     "clouddeploy.targets.get",
     "clouddeploy.targets.getIamPolicy",
     "clouddeploy.targets.list",
+    "clouddeploy.targets.listEffectiveTags",
+    "clouddeploy.targets.listTagBindings",
     "clouddeploy.targets.update",
     "cloudfunctions.functions.call",
     "cloudfunctions.functions.create",
@@ -7972,6 +7977,10 @@
     "videostitcher.liveConfigs.list",
     "videostitcher.liveSessions.create",
     "videostitcher.liveSessions.get",
+    "videostitcher.operations.cancel",
+    "videostitcher.operations.delete",
+    "videostitcher.operations.get",
+    "videostitcher.operations.list",
     "videostitcher.slates.create",
     "videostitcher.slates.delete",
     "videostitcher.slates.get",

diff --git a/roles/iam.securityReviewer b/roles/iam.securityReviewer
@@ -1775,6 +1775,7 @@
     "videostitcher.cdnKeys.list",
     "videostitcher.liveAdTagDetails.list",
     "videostitcher.liveConfigs.list",
+    "videostitcher.operations.list",
     "videostitcher.slates.list",
     "videostitcher.vodAdTagDetails.list",
     "videostitcher.vodConfigs.list",

diff --git a/roles/owner b/roles/owner
@@ -1123,6 +1123,7 @@
     "backupdr.managementServers.assignBackupPlans",
     "backupdr.managementServers.backupAccess",
     "backupdr.managementServers.create",
+    "backupdr.managementServers.createConnection",
     "backupdr.managementServers.createDynamicProtection",
     "backupdr.managementServers.delete",
     "backupdr.managementServers.deleteDynamicProtection",
@@ -2519,10 +2520,14 @@
     "clouddeploy.customTargetTypes.setIamPolicy",
     "clouddeploy.customTargetTypes.update",
     "clouddeploy.deliveryPipelines.create",
+    "clouddeploy.deliveryPipelines.createTagBinding",
     "clouddeploy.deliveryPipelines.delete",
+    "clouddeploy.deliveryPipelines.deleteTagBinding",
     "clouddeploy.deliveryPipelines.get",
     "clouddeploy.deliveryPipelines.getIamPolicy",
     "clouddeploy.deliveryPipelines.list",
+    "clouddeploy.deliveryPipelines.listEffectiveTags",
+    "clouddeploy.deliveryPipelines.listTagBindings",
     "clouddeploy.deliveryPipelines.setIamPolicy",
     "clouddeploy.deliveryPipelines.update",
     "clouddeploy.jobRuns.get",
@@ -2549,10 +2554,14 @@
     "clouddeploy.rollouts.retryJob",
     "clouddeploy.rollouts.rollback",
     "clouddeploy.targets.create",
+    "clouddeploy.targets.createTagBinding",
     "clouddeploy.targets.delete",
+    "clouddeploy.targets.deleteTagBinding",
     "clouddeploy.targets.get",
     "clouddeploy.targets.getIamPolicy",
     "clouddeploy.targets.list",
+    "clouddeploy.targets.listEffectiveTags",
+    "clouddeploy.targets.listTagBindings",
     "clouddeploy.targets.setIamPolicy",
     "clouddeploy.targets.update",
     "cloudfunctions.functions.call",
@@ -9130,6 +9139,10 @@
     "videostitcher.liveConfigs.list",
     "videostitcher.liveSessions.create",
     "videostitcher.liveSessions.get",
+    "videostitcher.operations.cancel",
+    "videostitcher.operations.delete",
+    "videostitcher.operations.get",
+    "videostitcher.operations.list",
     "videostitcher.slates.create",
     "videostitcher.slates.delete",
     "videostitcher.slates.get",

diff --git a/roles/videostitcher.admin b/roles/videostitcher.admin
@@ -17,6 +17,10 @@
     "videostitcher.liveConfigs.list",
     "videostitcher.liveSessions.create",
     "videostitcher.liveSessions.get",
+    "videostitcher.operations.cancel",
+    "videostitcher.operations.delete",
+    "videostitcher.operations.get",
+    "videostitcher.operations.list",
     "videostitcher.slates.create",
     "videostitcher.slates.delete",
     "videostitcher.slates.get",

diff --git a/roles/videostitcher.viewer b/roles/videostitcher.viewer
@@ -11,6 +11,8 @@
     "videostitcher.liveConfigs.get",
     "videostitcher.liveConfigs.list",
     "videostitcher.liveSessions.get",
+    "videostitcher.operations.get",
+    "videostitcher.operations.list",
     "videostitcher.slates.get",
     "videostitcher.slates.list",
     "videostitcher.vodAdTagDetails.get",