Remove broken condition (didn't include user-managed default SAs)

nccgroup · Feb 13, 2020 · e049394 · e049394
1 parent 7a30e7e
commit e049394
Showing 1 changed file with 1 addition and 4 deletions.
diff --git a/ScoutSuite/providers/gcp/rules/findings/cloudresourcemanager-sa-has-admin-privileges.json b/ScoutSuite/providers/gcp/rules/findings/cloudresourcemanager-sa-has-admin-privileges.json
@@ -8,10 +8,7 @@
       [ "cloudresourcemanager.projects.id.bindings.id.name", "containAtLeastOneOf", ["editor", "owner"]],
       [ "cloudresourcemanager.projects.id.bindings.id.name", "match", ".*admin"]
     ],
-    [ "and", 
-      ["cloudresourcemanager.projects.id.bindings.id.members.service_accounts", "notEmpty", ""],
-      ["cloudresourcemanager.projects.id.bindings.id.members.service_accounts", "match", ".+@.+[.]iam[.]gserviceaccount[.]com"]
-    ]
+    ["cloudresourcemanager.projects.id.bindings.id.members.service_accounts", "notEmpty", ""]
   ],
   "id_suffix": "service_accounts"
 }