forked from aquasecurity/tfsec
-
Notifications
You must be signed in to change notification settings - Fork 0
/
no_project_level_default_service_account_assignment.tf.go
47 lines (41 loc) · 1.31 KB
/
no_project_level_default_service_account_assignment.tf.go
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
package iam
var terraformNoProjectLevelDefaultServiceAccountAssignmentGoodExamples = []string{
`
resource "google_service_account" "test" {
account_id = "account123"
display_name = "account123"
}
resource "google_project_iam_member" "project-123" {
project = "project-123"
role = "roles/whatever"
member = "serviceAccount:${google_service_account.test.email}"
}
`,
}
var terraformNoProjectLevelDefaultServiceAccountAssignmentBadExamples = []string{
`
resource "google_project_iam_member" "project-123" {
project = "project-123"
role = "roles/whatever"
member = "123-compute@developer.gserviceaccount.com"
}
`, `
resource "google_project_iam_member" "project-123" {
project = "project-123"
role = "roles/whatever"
member = "123@appspot.gserviceaccount.com"
}
`, `
data "google_compute_default_service_account" "default" {
}
resource "google_project_iam_member" "project-123" {
project = "project-123"
role = "roles/whatever"
member = data.google_compute_default_service_account.default.id
}
`,
}
var terraformNoProjectLevelDefaultServiceAccountAssignmentLinks = []string{
`https://registry.terraform.io/providers/hashicorp/google/latest/docs/resources/google_project_iam`, ``,
}
var terraformNoProjectLevelDefaultServiceAccountAssignmentRemediationMarkdown = ``