[ABUSE] By: Murugesan / Board: cloud-apigee (79468)

[dchiesa1]

Hi Mods. This message is in the wrong place. I think it should be moved to https://www.googlecloudcommunity.com/gc/Google-Cloud-s-operations-suite/bd-p/cloud-operations .

Link to post: (An unused permission removal through security center remediation suggestion)
by Murugesan

https://www.googlecloudcommunity.com/gc/Apigee/An-unused-permission-removal-through-security-center-...

Security command center reported the vulnerability " An unused permission" on user and service account and suggested to remediate accordingly to the IAM recommender. On the popup window, there IAM recommender suggested to remove the unused and  granted offending permission and add the less privilege roles to the user and service account. After removing the overly granted permission, the scan dashboard still shows the vulnerabilities.  Also to be sure on removing the role and binding to the service accounts and user, verified the user permission in the IAM and as well as gcloud command, it all confirming the excess and unused permission has been removed but security command center still stays or reporting the same case.

This message has 0 replies