Add GCP > CIS v1.3 > 2.15 Ensure 'Access Approval' is 'Enabled'

[vkumbha]

Is your feature request related to a problem? Please describe.
Add GCP > CIS v1.3 > 2.15 Ensure 'Access Approval' is 'Enabled'

Description:
GCP Access Approval enables you to require your organizations' explicit approval whenever Google support try to access your projects. You can then select users within your organization who can approve these requests through giving them a security role in IAM. All access requests display which Google Employee requested them in an email or Pub/Sub message that you can choose to Approve. This adds an additional control and logging of who in your organization approved/denied these requests.

Audit:
From Console:

Determine if Access Transparency is Enabled as it is a Dependency

1. From the Google Cloud Home inside the project you wish to audit, click on the Navigation hamburger menu in the top left. Hoverover the IAM & Admin Menu. Select settings in the middle of the column that opens.
2. The status should be "Enabled' under the heading Access Transparency

Determine if Access Approval is Enabled:

1. From the Google Cloud Home, within the project you wish to check, click on the Navigation hamburger menu in the top left. Hover over the Security Menu. Select Access Approval in the middle of the column that opens.
2. The status will be displayed here. If you see a screen saying you need to enroll in Access Approval, it is not enabled.

From CLI:

Determine if Access Approval is Enabled

1. From within the project you wish to audit, run the following command.
   gcloud access-approval settings get
2. The status will be displayed in the output.