Hidden Risk in the Default Roles of Google-Managed Service Accounts

Some Google-managed service accounts are binded by default to a role granting access to storage.objects.read. This hidden risk is (yet another) great reason to use customer-managed KMS keys to encrypt your sensitive data stored in buckets.

The post Hidden Risk in the Default Roles of Google-Managed Service Accounts appeared first on Ermetic.

The post Hidden Risk in the Default Roles of Google-Managed Service Accounts appeared first on Security Boulevard.

accounts gcp google hidden managed risk roles service