iam-sa-default-gets-editor

Status: IN

Default service accounts (Compute Engine, App Engine) automatically receive roles/editor — a security anti-pattern that should be disabled via org policy.

Source: entries/2026/03/10/iam-service-accounts.md

JSON