TF_GCP_15

TF_GCP_15

Asset

google_organization_iam_member

Description

Ensures that there are no IAM members on org level that points to a default service account. Generally one should avoid using default service accounts in favor of using specific service accounts for each service. Using a shared account can lead to unintended consequences, such as another service getting elevated permissions. All permissions on org level are inherited.