policies/constraints/iam_block_service_account_creator_role.yaml [23:31]:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
spec:
  severity: high
  match:
    target: # {"$ref":"#/definitions/io.k8s.cli.setters.target_fldr_trusted"}
    - "organizations/**"
    exclude: [] # optional, default is no exclusions
  parameters:
    mode: denylist
    assetType: cloudresourcemanager.googleapis.com/Project
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -



policies/constraints/iam_deny_role.yaml [23:31]:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
spec:
  severity: high
  match:
    target: # {"$ref":"#/definitions/io.k8s.cli.setters.target_fldr_trusted"}
    - "organizations/**"
    exclude: [] # optional, default is no exclusions
  parameters:
    mode: denylist
    assetType: cloudresourcemanager.googleapis.com/Project
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -



