{"id":"iam-sa-default-gets-editor","text":"Default service accounts (Compute Engine, App Engine) automatically receive roles/editor — a security anti-pattern that should be disabled via org policy.","truth_value":"IN","source":"entries/2026/03/10/iam-service-accounts.md","source_url":"","source_hash":"1c861fff003e0a40","justifications":[],"dependents":[],"metadata":{},"explanation":{"steps":[{"node":"iam-sa-default-gets-editor","truth_value":"IN","reason":"premise"}]}}