GCP Permissions Reference¶

AccuKnox's GCP scanner uses a project-level custom role with 901 read-only permissions across 41 services. Every permission is a .list, .get, .getIamPolicy, or export/analyze verb, so AccuKnox never reads object contents, table rows, or secret payloads.

See the overview to compare clouds, or the GCP prerequisites for setup steps.

About the iam.googleapis.com/* permissions

17 permissions use the fully-qualified iam.googleapis.com/* form (Workload Identity Federation and OAuth clients). These are not part of the built-in roles/viewer and are included deliberately for full IAM posture visibility.

Reading this reference

Permissions are grouped by service; ones that serve the same purpose share a row. Hover (or tap) the ⓘ badge to see why AccuKnox needs each one.

Access Approval (4)¶

Permission	Findings / asset discovery
`accessapproval.requests.get`	Access Approval Enabled. Asset: access approval settings. Why
`accessapproval.requests.list`	Access Approval Enabled. Asset: access approval settings. Why
`accessapproval.serviceAccounts.get`	Access Approval Enabled. Asset: access approval settings. Why
`accessapproval.settings.get`	Access Approval Enabled. Asset: access approval settings. Why

API Gateway (4)¶

Permission	Findings / asset discovery
`apigateway.apiconfigs.list`	Gateway public-access IAM checks. Assets: gcp_api_gateway_*. Why
`apigateway.apis.list`	Gateway public-access IAM checks. Assets: gcp_api_gateway_*. Why
`apigateway.gateways.getIamPolicy`	Gateway public-access IAM checks. Assets: gcp_api_gateway_*. Why
`apigateway.gateways.list`	Gateway public-access IAM checks. Assets: gcp_api_gateway_*. Why

API Keys (3)¶

Permission	Findings / asset discovery
`apikeys.keys.get`	API Key Rotation, API Key API Restriction, API Key Application Restriction, API Key Active Services Only. Asset: gcp_apikeys_key. Why
`apikeys.keys.getKeyString`	API Key Rotation, API Key API Restriction, API Key Application Restriction, API Key Active Services Only. Asset: gcp_apikeys_key. Why
`apikeys.keys.list`	API Key Rotation, API Key API Restriction, API Key Application Restriction, API Key Active Services Only. Asset: gcp_apikeys_key. Why

Artifact Registry (4)¶

Permission	Findings / asset discovery
`artifactregistry.packages.list`	Repository Public Access, Repository CMK Encryption. Asset: gcp_artifact_registry_repository. Why
`artifactregistry.repositories.get`	Repository Public Access, Repository CMK Encryption. Asset: gcp_artifact_registry_repository. Why
`artifactregistry.repositories.list`	Repository Public Access, Repository CMK Encryption. Asset: gcp_artifact_registry_repository. Why
`artifactregistry.versions.list`	Repository Public Access, Repository CMK Encryption. Asset: gcp_artifact_registry_repository. Why

BigQuery (4)¶

Permission	Findings / asset discovery
`bigquery.datasets.get`	Datasets CMK Encrypted, Dataset Labels Added, Dataset Public Access, Table Expiration. Assets: gcp_bigquery_dataset, gcp_bigquery_table. Why
`bigquery.datasets.getIamPolicy`	Datasets CMK Encrypted, Dataset Labels Added, Dataset Public Access, Table Expiration. Assets: gcp_bigquery_dataset, gcp_bigquery_table. Why
`bigquery.tables.get`	Datasets CMK Encrypted, Dataset Labels Added, Dataset Public Access, Table Expiration. Assets: gcp_bigquery_dataset, gcp_bigquery_table. Why
`bigquery.tables.list`	Datasets CMK Encrypted, Dataset Labels Added, Dataset Public Access, Table Expiration. Assets: gcp_bigquery_dataset, gcp_bigquery_table. Why

Cloud Bigtable (2)¶

Permission	Findings / asset discovery
`bigtable.instances.getIamPolicy`	Instance public-access IAM checks. Asset: gcp_bigtable_instance. Why
`bigtable.instances.list`	Instance public-access IAM checks. Asset: gcp_bigtable_instance. Why

Cloud Billing (4)¶

Permission	Findings / asset discovery
`billing.anomalies.get`	Billing Alerts Enabled, cost-anomaly correlation. Why
`billing.anomalies.list`	Billing Alerts Enabled, cost-anomaly correlation. Why
`billing.resourceCosts.get`	Billing Alerts Enabled, cost-anomaly correlation. Why
`billing.resourcebudgets.read`	Billing Alerts Enabled, cost-anomaly correlation. Why

Cloud Asset Inventory (104)¶

Permission	Findings / asset discovery
`cloudasset.assets.analyzeIamPolicy` `cloudasset.assets.analyzeMove` `cloudasset.assets.analyzeOrgPolicy` `cloudasset.assets.exportAppengineApplications` `cloudasset.assets.exportAppengineServices` `cloudasset.assets.exportAppengineVersions` `cloudasset.assets.exportBigqueryDatasets` `cloudasset.assets.exportBigqueryModels` `cloudasset.assets.exportBigqueryTables` `cloudasset.assets.exportCloudDocumentAIEvaluation` `cloudasset.assets.exportCloudDocumentAIHumanReviewConfig` `cloudasset.assets.exportCloudDocumentAILabelerPool` `cloudasset.assets.exportCloudDocumentAIProcessor` `cloudasset.assets.exportCloudDocumentAIProcessorVersion` `cloudasset.assets.exportCloudbillingBillingAccounts` `cloudasset.assets.exportCloudkmsCryptoKeyVersions` `cloudasset.assets.exportCloudkmsCryptoKeys` `cloudasset.assets.exportCloudkmsKeyRings` `cloudasset.assets.exportCloudmemcacheInstances` `cloudasset.assets.exportCloudresourcemanagerFolders` `cloudasset.assets.exportCloudresourcemanagerOrganizations` `cloudasset.assets.exportCloudresourcemanagerProjects` `cloudasset.assets.exportCloudresourcemanagerTagBindings` `cloudasset.assets.exportCloudresourcemanagerTagKeys` `cloudasset.assets.exportCloudresourcemanagerTagValues` `cloudasset.assets.exportComputeAddress` `cloudasset.assets.exportComputeAutoscalers` `cloudasset.assets.exportComputeBackendBuckets` `cloudasset.assets.exportComputeBackendServices` `cloudasset.assets.exportComputeDisks` `cloudasset.assets.exportComputeFirewalls` `cloudasset.assets.exportComputeForwardingRules` `cloudasset.assets.exportComputeGlobalForwardingRules` `cloudasset.assets.exportComputeHealthChecks` `cloudasset.assets.exportComputeHttpHealthChecks` `cloudasset.assets.exportComputeHttpsHealthChecks` `cloudasset.assets.exportComputeImages` `cloudasset.assets.exportComputeInstanceGroupManagers` `cloudasset.assets.exportComputeInstanceGroups` `cloudasset.assets.exportComputeInstanceTemplates` `cloudasset.assets.exportComputeInstances` `cloudasset.assets.exportComputeInterconnect` `cloudasset.assets.exportComputeInterconnectAttachment` `cloudasset.assets.exportComputeLicenses` `cloudasset.assets.exportComputeNetworkEndpointGroups` `cloudasset.assets.exportComputeNetworks` `cloudasset.assets.exportComputeProjects` `cloudasset.assets.exportComputeRegionBackendServices` `cloudasset.assets.exportComputeRouters` `cloudasset.assets.exportComputeRoutes` `cloudasset.assets.exportComputeSecurityPolicy` `cloudasset.assets.exportComputeSnapshots` `cloudasset.assets.exportComputeSslCertificates` `cloudasset.assets.exportComputeSslPolicies` `cloudasset.assets.exportComputeSubnetworks` `cloudasset.assets.exportComputeTargetHttpProxies` `cloudasset.assets.exportComputeTargetHttpsProxies` `cloudasset.assets.exportComputeTargetInstances` `cloudasset.assets.exportComputeTargetPools` `cloudasset.assets.exportComputeTargetSslProxies` `cloudasset.assets.exportComputeTargetTcpProxies` `cloudasset.assets.exportComputeTargetVpnGateways` `cloudasset.assets.exportComputeUrlMaps` `cloudasset.assets.exportComputeVpnTunnels` `cloudasset.assets.exportContainerClusters` `cloudasset.assets.exportDataprocClusters` `cloudasset.assets.exportDataprocJobs` `cloudasset.assets.exportDnsManagedZones` `cloudasset.assets.exportDnsPolicies` `cloudasset.assets.exportIamRoles` `cloudasset.assets.exportIamServiceAccountKeys` `cloudasset.assets.exportIamServiceAccounts` `cloudasset.assets.exportIapTunnel` `cloudasset.assets.exportIapTunnelInstances` `cloudasset.assets.exportIapTunnelZones` `cloudasset.assets.exportIapWeb` `cloudasset.assets.exportIapWebServiceVersion` `cloudasset.assets.exportIapWebServices` `cloudasset.assets.exportIapWebType` `cloudasset.assets.exportOSConfigOSPolicyAssignmentReports` `cloudasset.assets.exportOSConfigOSPolicyAssignments` `cloudasset.assets.exportPubsubSnapshots` `cloudasset.assets.exportPubsubSubscriptions` `cloudasset.assets.exportPubsubTopics` `cloudasset.assets.exportServicemanagementServices` `cloudasset.assets.exportSpannerBackups` `cloudasset.assets.exportSpannerDatabases` `cloudasset.assets.exportSpannerInstances` `cloudasset.assets.exportSqladminBackupRuns` `cloudasset.assets.exportSqladminInstances` `cloudasset.assets.exportStorageBuckets` `cloudasset.assets.listCloudDocumentAIEvaluation` `cloudasset.assets.listCloudDocumentAIHumanReviewConfig` `cloudasset.assets.listCloudDocumentAILabelerPool` `cloudasset.assets.listCloudDocumentAIProcessor` `cloudasset.assets.listCloudDocumentAIProcessorVersion` `cloudasset.assets.listResource` `cloudasset.assets.listSqladminBackupRuns` `cloudasset.assets.searchAllIamPolicies` `cloudasset.assets.searchAllResources`	Powers the whole asset graph (every gcp_* asset type in the inventory) plus IAM policy analysis used by Member Admin / Service Account Role checks. Why
`cloudasset.othercloudconnections.get`	Powers the whole asset graph (every gcp_* asset type in the inventory) plus IAM policy analysis used by Member Admin / Service Account Role checks. Why
`cloudasset.othercloudconnections.list`	Powers the whole asset graph (every gcp_* asset type in the inventory) plus IAM policy analysis used by Member Admin / Service Account Role checks. Why
`cloudasset.savedqueries.get`	Powers the whole asset graph (every gcp_* asset type in the inventory) plus IAM policy analysis used by Member Admin / Service Account Role checks. Why
`cloudasset.savedqueries.list`	Powers the whole asset graph (every gcp_* asset type in the inventory) plus IAM policy analysis used by Member Admin / Service Account Role checks. Why

Cloud Build (4)¶

Permission	Findings / asset discovery
`cloudbuild.builds.get`	Build Trigger Permissions, pipeline asset discovery. Why
`cloudbuild.builds.list`	Build Trigger Permissions, pipeline asset discovery. Why
`cloudbuild.connections.get`	Build Trigger Permissions, pipeline asset discovery. Why
`cloudbuild.connections.list`	Build Trigger Permissions, pipeline asset discovery. Why

Cloud Functions (7)¶

Permission	Findings / asset discovery
`cloudfunctions.functions.get`	Function Public Access, Function Runtime Deprecated, Function Environment Variables checks. Assets: gcp_cloudfunctions_function. Why
`cloudfunctions.functions.getIamPolicy`	Function Public Access, Function Runtime Deprecated, Function Environment Variables checks. Assets: gcp_cloudfunctions_function. Why
`cloudfunctions.functions.list`	Function Public Access, Function Runtime Deprecated, Function Environment Variables checks. Assets: gcp_cloudfunctions_function. Why
`cloudfunctions.functions.sourceCodeGet`	Function Public Access, Function Runtime Deprecated, Function Environment Variables checks. Assets: gcp_cloudfunctions_function. Why
`cloudfunctions.locations.list`	Function Public Access, Function Runtime Deprecated, Function Environment Variables checks. Assets: gcp_cloudfunctions_function. Why
`cloudfunctions.operations.get`	Function Public Access, Function Runtime Deprecated, Function Environment Variables checks. Assets: gcp_cloudfunctions_function. Why
`cloudfunctions.operations.list`	Function Public Access, Function Runtime Deprecated, Function Environment Variables checks. Assets: gcp_cloudfunctions_function. Why

Cloud KMS (38)¶

Permission	Findings / asset discovery
`cloudkms.autokeyConfigs.get`	Key Rotation, KMS Public Access, CMEK usage checks feeding Datasets CMK Encrypted, Topic Encryption Enabled, Cluster/Node Encryption Enabled. Why
`cloudkms.cryptoKeyVersions.get`	Key Rotation, KMS Public Access, CMEK usage checks feeding Datasets CMK Encrypted, Topic Encryption Enabled, Cluster/Node Encryption Enabled. Why
`cloudkms.cryptoKeyVersions.list`	Key Rotation, KMS Public Access, CMEK usage checks feeding Datasets CMK Encrypted, Topic Encryption Enabled, Cluster/Node Encryption Enabled. Why
`cloudkms.cryptoKeys.get`	Key Rotation, KMS Public Access, CMEK usage checks feeding Datasets CMK Encrypted, Topic Encryption Enabled, Cluster/Node Encryption Enabled. Why
`cloudkms.cryptoKeys.getIamPolicy`	Key Rotation, KMS Public Access, CMEK usage checks feeding Datasets CMK Encrypted, Topic Encryption Enabled, Cluster/Node Encryption Enabled. Why
`cloudkms.cryptoKeys.list`	Key Rotation, KMS Public Access, CMEK usage checks feeding Datasets CMK Encrypted, Topic Encryption Enabled, Cluster/Node Encryption Enabled. Why
`cloudkms.ekmConfigs.get`	Key Rotation, KMS Public Access, CMEK usage checks feeding Datasets CMK Encrypted, Topic Encryption Enabled, Cluster/Node Encryption Enabled. Why
`cloudkms.ekmConfigs.getIamPolicy`	Key Rotation, KMS Public Access, CMEK usage checks feeding Datasets CMK Encrypted, Topic Encryption Enabled, Cluster/Node Encryption Enabled. Why
`cloudkms.ekmConnections.get`	Key Rotation, KMS Public Access, CMEK usage checks feeding Datasets CMK Encrypted, Topic Encryption Enabled, Cluster/Node Encryption Enabled. Why
`cloudkms.ekmConnections.getIamPolicy`	Key Rotation, KMS Public Access, CMEK usage checks feeding Datasets CMK Encrypted, Topic Encryption Enabled, Cluster/Node Encryption Enabled. Why
`cloudkms.ekmConnections.list`	Key Rotation, KMS Public Access, CMEK usage checks feeding Datasets CMK Encrypted, Topic Encryption Enabled, Cluster/Node Encryption Enabled. Why
`cloudkms.ekmConnections.verifyConnectivity`	Key Rotation, KMS Public Access, CMEK usage checks feeding Datasets CMK Encrypted, Topic Encryption Enabled, Cluster/Node Encryption Enabled. Why
`cloudkms.importJobs.get`	Key Rotation, KMS Public Access, CMEK usage checks feeding Datasets CMK Encrypted, Topic Encryption Enabled, Cluster/Node Encryption Enabled. Why
`cloudkms.importJobs.getIamPolicy`	Key Rotation, KMS Public Access, CMEK usage checks feeding Datasets CMK Encrypted, Topic Encryption Enabled, Cluster/Node Encryption Enabled. Why
`cloudkms.importJobs.list`	Key Rotation, KMS Public Access, CMEK usage checks feeding Datasets CMK Encrypted, Topic Encryption Enabled, Cluster/Node Encryption Enabled. Why
`cloudkms.kajPolicyConfigs.get`	Key Rotation, KMS Public Access, CMEK usage checks feeding Datasets CMK Encrypted, Topic Encryption Enabled, Cluster/Node Encryption Enabled. Why
`cloudkms.keyHandles.get`	Key Rotation, KMS Public Access, CMEK usage checks feeding Datasets CMK Encrypted, Topic Encryption Enabled, Cluster/Node Encryption Enabled. Why
`cloudkms.keyHandles.list`	Key Rotation, KMS Public Access, CMEK usage checks feeding Datasets CMK Encrypted, Topic Encryption Enabled, Cluster/Node Encryption Enabled. Why
`cloudkms.keyRings.get`	Key Rotation, KMS Public Access, CMEK usage checks feeding Datasets CMK Encrypted, Topic Encryption Enabled, Cluster/Node Encryption Enabled. Why
`cloudkms.keyRings.getIamPolicy`	Key Rotation, KMS Public Access, CMEK usage checks feeding Datasets CMK Encrypted, Topic Encryption Enabled, Cluster/Node Encryption Enabled. Why
`cloudkms.keyRings.list`	Key Rotation, KMS Public Access, CMEK usage checks feeding Datasets CMK Encrypted, Topic Encryption Enabled, Cluster/Node Encryption Enabled. Why
`cloudkms.keyRings.listEffectiveTags` `cloudkms.keyRings.listTagBindings`	Key Rotation, KMS Public Access, CMEK usage checks feeding Datasets CMK Encrypted, Topic Encryption Enabled, Cluster/Node Encryption Enabled. Why
`cloudkms.locations.generateRandomBytes`	Key Rotation, KMS Public Access, CMEK usage checks feeding Datasets CMK Encrypted, Topic Encryption Enabled, Cluster/Node Encryption Enabled. Why
`cloudkms.locations.get`	Key Rotation, KMS Public Access, CMEK usage checks feeding Datasets CMK Encrypted, Topic Encryption Enabled, Cluster/Node Encryption Enabled. Why
`cloudkms.locations.list`	Key Rotation, KMS Public Access, CMEK usage checks feeding Datasets CMK Encrypted, Topic Encryption Enabled, Cluster/Node Encryption Enabled. Why
`cloudkms.operations.get`	Key Rotation, KMS Public Access, CMEK usage checks feeding Datasets CMK Encrypted, Topic Encryption Enabled, Cluster/Node Encryption Enabled. Why
`cloudkms.projects.showEffectiveAutokeyConfig` `cloudkms.projects.showEffectiveKajEnrollmentConfig` `cloudkms.projects.showEffectiveKajPolicyConfig`	Key Rotation, KMS Public Access, CMEK usage checks feeding Datasets CMK Encrypted, Topic Encryption Enabled, Cluster/Node Encryption Enabled. Why
`cloudkms.protectableResources.list`	Key Rotation, KMS Public Access, CMEK usage checks feeding Datasets CMK Encrypted, Topic Encryption Enabled, Cluster/Node Encryption Enabled. Why
`cloudkms.protectedResources.search`	Key Rotation, KMS Public Access, CMEK usage checks feeding Datasets CMK Encrypted, Topic Encryption Enabled, Cluster/Node Encryption Enabled. Why
`cloudkms.retiredResources.get`	Key Rotation, KMS Public Access, CMEK usage checks feeding Datasets CMK Encrypted, Topic Encryption Enabled, Cluster/Node Encryption Enabled. Why
`cloudkms.retiredResources.list`	Key Rotation, KMS Public Access, CMEK usage checks feeding Datasets CMK Encrypted, Topic Encryption Enabled, Cluster/Node Encryption Enabled. Why
`cloudkms.singleTenantHsmInstanceProposals.get`	Key Rotation, KMS Public Access, CMEK usage checks feeding Datasets CMK Encrypted, Topic Encryption Enabled, Cluster/Node Encryption Enabled. Why
`cloudkms.singleTenantHsmInstanceProposals.list`	Key Rotation, KMS Public Access, CMEK usage checks feeding Datasets CMK Encrypted, Topic Encryption Enabled, Cluster/Node Encryption Enabled. Why
`cloudkms.singleTenantHsmInstances.get`	Key Rotation, KMS Public Access, CMEK usage checks feeding Datasets CMK Encrypted, Topic Encryption Enabled, Cluster/Node Encryption Enabled. Why
`cloudkms.singleTenantHsmInstances.list`	Key Rotation, KMS Public Access, CMEK usage checks feeding Datasets CMK Encrypted, Topic Encryption Enabled, Cluster/Node Encryption Enabled. Why

Cloud SQL (23)¶

Permission	Findings / asset discovery
`cloudsql.backupRuns.export`	SQL Public Access, SQL SSL Required, Automated Backups Enabled, DB Restore Times, unsafe database-flag checks. Assets: gcp_sql_database_instance, gcp_sql_backup_run. Why
`cloudsql.backupRuns.get`	SQL Public Access, SQL SSL Required, Automated Backups Enabled, DB Restore Times, unsafe database-flag checks. Assets: gcp_sql_database_instance, gcp_sql_backup_run. Why
`cloudsql.backupRuns.list`	SQL Public Access, SQL SSL Required, Automated Backups Enabled, DB Restore Times, unsafe database-flag checks. Assets: gcp_sql_database_instance, gcp_sql_backup_run. Why
`cloudsql.blueGreenDeployments.get`	SQL Public Access, SQL SSL Required, Automated Backups Enabled, DB Restore Times, unsafe database-flag checks. Assets: gcp_sql_database_instance, gcp_sql_backup_run. Why
`cloudsql.blueGreenDeployments.list`	SQL Public Access, SQL SSL Required, Automated Backups Enabled, DB Restore Times, unsafe database-flag checks. Assets: gcp_sql_database_instance, gcp_sql_backup_run. Why
`cloudsql.databases.get`	SQL Public Access, SQL SSL Required, Automated Backups Enabled, DB Restore Times, unsafe database-flag checks. Assets: gcp_sql_database_instance, gcp_sql_backup_run. Why
`cloudsql.databases.list`	SQL Public Access, SQL SSL Required, Automated Backups Enabled, DB Restore Times, unsafe database-flag checks. Assets: gcp_sql_database_instance, gcp_sql_backup_run. Why
`cloudsql.instances.createBackupDrBackup` `cloudsql.instances.export` `cloudsql.instances.getDiskShrinkConfig` `cloudsql.instances.listEffectiveTags` `cloudsql.instances.listEntraIdCertificates` `cloudsql.instances.listServerCas` `cloudsql.instances.listServerCertificates` `cloudsql.instances.listTagBindings` `cloudsql.instances.preCheckMajorVersionUpgrade`	SQL Public Access, SQL SSL Required, Automated Backups Enabled, DB Restore Times, unsafe database-flag checks. Assets: gcp_sql_database_instance, gcp_sql_backup_run. Why
`cloudsql.instances.get`	SQL Public Access, SQL SSL Required, Automated Backups Enabled, DB Restore Times, unsafe database-flag checks. Assets: gcp_sql_database_instance, gcp_sql_backup_run. Why
`cloudsql.instances.list`	SQL Public Access, SQL SSL Required, Automated Backups Enabled, DB Restore Times, unsafe database-flag checks. Assets: gcp_sql_database_instance, gcp_sql_backup_run. Why
`cloudsql.schemas.view`	SQL Public Access, SQL SSL Required, Automated Backups Enabled, DB Restore Times, unsafe database-flag checks. Assets: gcp_sql_database_instance, gcp_sql_backup_run. Why
`cloudsql.sslCerts.get`	SQL Public Access, SQL SSL Required, Automated Backups Enabled, DB Restore Times, unsafe database-flag checks. Assets: gcp_sql_database_instance, gcp_sql_backup_run. Why
`cloudsql.sslCerts.list`	SQL Public Access, SQL SSL Required, Automated Backups Enabled, DB Restore Times, unsafe database-flag checks. Assets: gcp_sql_database_instance, gcp_sql_backup_run. Why
`cloudsql.users.get`	SQL Public Access, SQL SSL Required, Automated Backups Enabled, DB Restore Times, unsafe database-flag checks. Assets: gcp_sql_database_instance, gcp_sql_backup_run. Why
`cloudsql.users.list`	SQL Public Access, SQL SSL Required, Automated Backups Enabled, DB Restore Times, unsafe database-flag checks. Assets: gcp_sql_database_instance, gcp_sql_backup_run. Why

Cloud Composer (1)¶

Permission	Findings / asset discovery
`composer.environments.list`	Composer environment asset discovery. Why

Compute Engine / VPC Networking (403)¶

Permission	Findings / asset discovery
`compute.acceleratorTypes.get`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.acceleratorTypes.list`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.addresses.get`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.addresses.list`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.addresses.listEffectiveTags` `compute.addresses.listTagBindings`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.advice.capacity` `compute.advice.capacityHistory`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.autoscalers.get`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.autoscalers.list`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.backendBuckets.get`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.backendBuckets.getIamPolicy`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.backendBuckets.list`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.backendBuckets.listEffectiveTags` `compute.backendBuckets.listTagBindings`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.backendServices.get`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.backendServices.getIamPolicy`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.backendServices.list`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.backendServices.listEffectiveTags` `compute.backendServices.listTagBindings`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.commitments.get`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.commitments.list`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.commitments.listEffectiveTags` `compute.commitments.listTagBindings`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.crossSiteNetworks.get`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.crossSiteNetworks.list`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.diskSettings.get`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.diskTypes.get`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.diskTypes.list`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.disks.get`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.disks.getIamPolicy`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.disks.list`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.disks.listEffectiveTags` `compute.disks.listTagBindings` `compute.disks.useReadOnly`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.externalVpnGateways.get`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.externalVpnGateways.list`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.externalVpnGateways.listEffectiveTags` `compute.externalVpnGateways.listTagBindings`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.firewallPolicies.get`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.firewallPolicies.getIamPolicy`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.firewallPolicies.list`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.firewallPolicies.listEffectiveTags` `compute.firewallPolicies.listTagBindings`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.firewalls.get`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.firewalls.list`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.firewalls.listEffectiveTags` `compute.firewalls.listTagBindings`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.forwardingRules.get`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.forwardingRules.list`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.forwardingRules.listEffectiveTags` `compute.forwardingRules.listTagBindings`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.futureReservations.get`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.futureReservations.getIamPolicy`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.futureReservations.list`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.futureReservations.listEffectiveTags` `compute.futureReservations.listTagBindings`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.globalAddresses.get`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.globalAddresses.list`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.globalAddresses.listEffectiveTags` `compute.globalAddresses.listTagBindings`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.globalForwardingRules.get`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.globalForwardingRules.list`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.globalForwardingRules.listEffectiveTags` `compute.globalForwardingRules.listTagBindings`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.globalNetworkEndpointGroups.get`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.globalNetworkEndpointGroups.list`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.globalNetworkEndpointGroups.listEffectiveTags` `compute.globalNetworkEndpointGroups.listTagBindings`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.globalOperations.get`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.globalOperations.getIamPolicy`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.globalOperations.list`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.globalPublicDelegatedPrefixes.get`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.globalPublicDelegatedPrefixes.list`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.healthChecks.get`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.healthChecks.list`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.healthChecks.listEffectiveTags` `compute.healthChecks.listTagBindings` `compute.healthChecks.useReadOnly`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.hosts.get`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.hosts.getVersion`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.hosts.list`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.httpHealthChecks.get`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.httpHealthChecks.list`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.httpHealthChecks.listEffectiveTags` `compute.httpHealthChecks.listTagBindings` `compute.httpHealthChecks.useReadOnly`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.httpsHealthChecks.get`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.httpsHealthChecks.list`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.httpsHealthChecks.listEffectiveTags` `compute.httpsHealthChecks.listTagBindings` `compute.httpsHealthChecks.useReadOnly`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.images.get`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.images.getFromFamily` `compute.images.listEffectiveTags` `compute.images.listTagBindings` `compute.images.useReadOnly`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.images.getIamPolicy`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.images.list`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.instanceGroupManagers.get`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.instanceGroupManagers.list`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.instanceGroupManagers.listEffectiveTags` `compute.instanceGroupManagers.listTagBindings`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.instanceGroups.get`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.instanceGroups.list`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.instanceGroups.listEffectiveTags` `compute.instanceGroups.listTagBindings`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.instanceSettings.get`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.instanceTemplates.get`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.instanceTemplates.getIamPolicy`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.instanceTemplates.list`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.instanceTemplates.useReadOnly`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.instances.get`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.instances.getEffectiveFirewalls` `compute.instances.getGuestAttributes` `compute.instances.getScreenshot` `compute.instances.getSerialPortOutput` `compute.instances.getShieldedInstanceIdentity` `compute.instances.getShieldedVmIdentity` `compute.instances.listEffectiveTags` `compute.instances.listReferrers` `compute.instances.listTagBindings`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.instances.getIamPolicy`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.instances.list`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.instantSnapshotGroups.get`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.instantSnapshotGroups.getIamPolicy`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.instantSnapshotGroups.list`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.instantSnapshots.get`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.instantSnapshots.getIamPolicy`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.instantSnapshots.list`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.instantSnapshots.listEffectiveTags` `compute.instantSnapshots.listTagBindings`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.interconnectAttachmentGroups.get`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.interconnectAttachmentGroups.list`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.interconnectAttachments.get`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.interconnectAttachments.list`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.interconnectAttachments.listEffectiveTags` `compute.interconnectAttachments.listTagBindings`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.interconnectGroups.get`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.interconnectGroups.list`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.interconnectLocations.get`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.interconnectLocations.list`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.interconnectRemoteLocations.get`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.interconnectRemoteLocations.list`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.interconnects.get`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.interconnects.list`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.interconnects.listEffectiveTags` `compute.interconnects.listTagBindings`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.licenseCodes.get`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.licenseCodes.getIamPolicy`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.licenseCodes.list`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.licenses.get`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.licenses.getIamPolicy`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.licenses.list`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.licenses.listEffectiveTags` `compute.licenses.listTagBindings`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.machineImages.get`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.machineImages.getIamPolicy`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.machineImages.list`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.machineImages.listEffectiveTags` `compute.machineImages.listTagBindings`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.machineTypes.get`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.machineTypes.list`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.multiMig.get`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.multiMig.list`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.multiMigMembers.get`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.multiMigMembers.list`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.networkAttachments.get`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.networkAttachments.getIamPolicy`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.networkAttachments.list`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.networkAttachments.listEffectiveTags` `compute.networkAttachments.listTagBindings`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.networkEdgeSecurityServices.get`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.networkEdgeSecurityServices.list`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.networkEdgeSecurityServices.listEffectiveTags` `compute.networkEdgeSecurityServices.listTagBindings`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.networkEndpointGroups.get`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.networkEndpointGroups.list`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.networkEndpointGroups.listEffectiveTags` `compute.networkEndpointGroups.listTagBindings`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.networkProfiles.get`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.networkProfiles.list`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.networks.get`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.networks.getEffectiveFirewalls` `compute.networks.getRegionEffectiveFirewalls` `compute.networks.listEffectiveTags` `compute.networks.listPeeringRoutes` `compute.networks.listTagBindings`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.networks.list`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.nodeGroups.get`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.nodeGroups.getIamPolicy`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.nodeGroups.list`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.nodeTemplates.get`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.nodeTemplates.getIamPolicy`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.nodeTemplates.list`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.nodeTypes.get`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.nodeTypes.list`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.organizations.listAssociations`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.packetMirrorings.get`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.packetMirrorings.list`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.packetMirrorings.listEffectiveTags` `compute.packetMirrorings.listTagBindings`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.previewFeatures.get`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.previewFeatures.list`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.projects.get`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.publicAdvertisedPrefixes.get`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.publicAdvertisedPrefixes.list`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.publicDelegatedPrefixes.get`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.publicDelegatedPrefixes.list`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.publicDelegatedPrefixes.listEffectiveTags` `compute.publicDelegatedPrefixes.listTagBindings`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.regionBackendBuckets.get`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.regionBackendBuckets.getIamPolicy`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.regionBackendBuckets.list`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.regionBackendBuckets.listEffectiveTags` `compute.regionBackendBuckets.listTagBindings`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.regionBackendServices.get`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.regionBackendServices.getIamPolicy`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.regionBackendServices.list`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.regionBackendServices.listEffectiveTags` `compute.regionBackendServices.listTagBindings`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.regionCompositeHealthChecks.get`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.regionCompositeHealthChecks.list`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.regionFirewallPolicies.get`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.regionFirewallPolicies.getIamPolicy`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.regionFirewallPolicies.list`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.regionFirewallPolicies.listEffectiveTags` `compute.regionFirewallPolicies.listTagBindings`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.regionHealthAggregationPolicies.get`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.regionHealthAggregationPolicies.list`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.regionHealthCheckServices.get`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.regionHealthCheckServices.list`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.regionHealthChecks.get`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.regionHealthChecks.list`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.regionHealthChecks.listEffectiveTags` `compute.regionHealthChecks.listTagBindings` `compute.regionHealthChecks.useReadOnly`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.regionHealthSources.get`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.regionHealthSources.list`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.regionNetworkEndpointGroups.get`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.regionNetworkEndpointGroups.list`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.regionNetworkEndpointGroups.listEffectiveTags` `compute.regionNetworkEndpointGroups.listTagBindings`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.regionNetworkPolicies.get`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.regionNetworkPolicies.list`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.regionNotificationEndpoints.get`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.regionNotificationEndpoints.list`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.regionOperations.get`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.regionOperations.getIamPolicy`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.regionOperations.list`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.regionSecurityPolicies.get`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.regionSecurityPolicies.list`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.regionSecurityPolicies.listEffectiveTags` `compute.regionSecurityPolicies.listTagBindings`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.regionSslCertificates.get`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.regionSslCertificates.list`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.regionSslCertificates.listEffectiveTags` `compute.regionSslCertificates.listTagBindings`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.regionSslPolicies.get`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.regionSslPolicies.list`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.regionSslPolicies.listAvailableFeatures` `compute.regionSslPolicies.listEffectiveTags` `compute.regionSslPolicies.listTagBindings`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.regionTargetHttpProxies.get`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.regionTargetHttpProxies.list`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.regionTargetHttpProxies.listEffectiveTags` `compute.regionTargetHttpProxies.listTagBindings`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.regionTargetHttpsProxies.get`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.regionTargetHttpsProxies.list`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.regionTargetHttpsProxies.listEffectiveTags` `compute.regionTargetHttpsProxies.listTagBindings`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.regionTargetTcpProxies.get`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.regionTargetTcpProxies.list`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.regionTargetTcpProxies.listEffectiveTags` `compute.regionTargetTcpProxies.listTagBindings`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.regionUrlMaps.get`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.regionUrlMaps.list`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.regionUrlMaps.listEffectiveTags` `compute.regionUrlMaps.listTagBindings` `compute.regionUrlMaps.validate`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.regions.get`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.regions.list`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.reservationBlocks.get`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.reservationBlocks.list`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.reservationSlots.get`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.reservationSlots.list`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.reservationSubBlocks.get`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.reservationSubBlocks.list`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.reservations.get`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.reservations.list`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.reservations.listEffectiveTags` `compute.reservations.listTagBindings`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.resourcePolicies.get`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.resourcePolicies.getIamPolicy`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.resourcePolicies.list`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.resourcePolicies.useReadOnly`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.rolloutPlans.get`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.rolloutPlans.list`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.rollouts.get`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.rollouts.list`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.routers.get`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.routers.getRoutePolicy` `compute.routers.listBgpRoutes` `compute.routers.listEffectiveTags` `compute.routers.listRoutePolicies` `compute.routers.listTagBindings`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.routers.list`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.routes.get`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.routes.list`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.routes.listEffectiveTags` `compute.routes.listTagBindings`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.securityPolicies.get`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.securityPolicies.list`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.securityPolicies.listEffectiveTags` `compute.securityPolicies.listTagBindings`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.serviceAttachments.get`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.serviceAttachments.getIamPolicy`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.serviceAttachments.list`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.serviceAttachments.listEffectiveTags` `compute.serviceAttachments.listTagBindings`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.snapshotGroups.get`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.snapshotGroups.getIamPolicy`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.snapshotGroups.list`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.snapshotSettings.get`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.snapshots.get`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.snapshots.getIamPolicy`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.snapshots.list`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.snapshots.listEffectiveTags` `compute.snapshots.listTagBindings`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.spotAssistants.get`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.sslCertificates.get`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.sslCertificates.list`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.sslCertificates.listEffectiveTags` `compute.sslCertificates.listTagBindings`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.sslPolicies.get`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.sslPolicies.list`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.sslPolicies.listAvailableFeatures` `compute.sslPolicies.listEffectiveTags` `compute.sslPolicies.listTagBindings`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.storagePools.get`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.storagePools.getIamPolicy`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.storagePools.list`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.storagePools.listEffectiveTags` `compute.storagePools.listTagBindings`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.subnetworks.get`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.subnetworks.getIamPolicy`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.subnetworks.list`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.subnetworks.listEffectiveTags` `compute.subnetworks.listTagBindings`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.targetGrpcProxies.get`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.targetGrpcProxies.list`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.targetGrpcProxies.listEffectiveTags` `compute.targetGrpcProxies.listTagBindings`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.targetHttpProxies.get`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.targetHttpProxies.list`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.targetHttpProxies.listEffectiveTags` `compute.targetHttpProxies.listTagBindings`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.targetHttpsProxies.get`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.targetHttpsProxies.list`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.targetHttpsProxies.listEffectiveTags` `compute.targetHttpsProxies.listTagBindings`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.targetInstances.get`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.targetInstances.list`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.targetInstances.listEffectiveTags` `compute.targetInstances.listTagBindings`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.targetPools.get`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.targetPools.list`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.targetPools.listEffectiveTags` `compute.targetPools.listTagBindings`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.targetSslProxies.get`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.targetSslProxies.list`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.targetSslProxies.listEffectiveTags` `compute.targetSslProxies.listTagBindings`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.targetTcpProxies.get`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.targetTcpProxies.list`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.targetTcpProxies.listEffectiveTags` `compute.targetTcpProxies.listTagBindings`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.targetVpnGateways.get`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.targetVpnGateways.list`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.targetVpnGateways.listEffectiveTags` `compute.targetVpnGateways.listTagBindings`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.urlMaps.get`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.urlMaps.list`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.urlMaps.listEffectiveTags` `compute.urlMaps.listTagBindings` `compute.urlMaps.validate`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.vmExtensionPolicies.get`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.vmExtensionPolicies.list`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.vpnGateways.get`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.vpnGateways.list`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.vpnGateways.listEffectiveTags` `compute.vpnGateways.listTagBindings`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.vpnTunnels.get`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.vpnTunnels.list`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.vpnTunnels.listEffectiveTags` `compute.vpnTunnels.listTagBindings`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.wireGroups.get`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.wireGroups.list`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.zoneOperations.get`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.zoneOperations.getIamPolicy`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.zoneOperations.list`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.zones.get`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why
`compute.zones.list`	Open All Ports / Open SSH / Open RDP / Open HTTP / Open Custom Ports, Excessive Firewall Rules, VPC Flow Logs Enabled, Private Access Enabled, Multiple Subnets, OS Login Enabled, Internet Exposure, Default Service Account, Enable Usage Export. Assets: gcp_compute_firewall, gcp_compute_network, gcp_compute_subnetwork, gcp_compute_instance, gcp_compute_disk, gcp_compute_project_metadata. Why

Google Kubernetes Engine (GKE) (167)¶

Permission	Findings / asset discovery
`container.apiServices.get`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.apiServices.getStatus`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.apiServices.list`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.auditSinks.get`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.auditSinks.list`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.backendConfigs.get`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.backendConfigs.list`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.bindings.get`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.bindings.list`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.certificateSigningRequests.get`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.certificateSigningRequests.getStatus`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.certificateSigningRequests.list`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.clusterRoleBindings.get`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.clusterRoleBindings.list`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.clusterRoles.get`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.clusterRoles.list`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.clusters.connect` `container.clusters.listEffectiveTags` `container.clusters.listTagBindings`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.clusters.get`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.clusters.list`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.componentStatuses.get`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.componentStatuses.list`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.configMaps.get`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.configMaps.list`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.controllerRevisions.get`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.controllerRevisions.list`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.cronJobs.get`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.cronJobs.getStatus`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.cronJobs.list`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.csiDrivers.get`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.csiDrivers.list`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.csiNodeInfos.get`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.csiNodeInfos.list`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.csiNodes.get`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.csiNodes.list`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.customResourceDefinitions.get`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.customResourceDefinitions.getStatus`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.customResourceDefinitions.list`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.daemonSets.get`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.daemonSets.getStatus`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.daemonSets.list`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.deployments.get`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.deployments.getStatus`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.deployments.list`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.endpointSlices.get`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.endpointSlices.list`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.endpoints.get`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.endpoints.list`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.events.get`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.events.list`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.frontendConfigs.get`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.frontendConfigs.list`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.horizontalPodAutoscalers.get`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.horizontalPodAutoscalers.getStatus`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.horizontalPodAutoscalers.list`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.ingresses.get`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.ingresses.getStatus`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.ingresses.list`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.initializerConfigurations.get`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.initializerConfigurations.list`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.jobs.get`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.jobs.getStatus`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.jobs.list`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.leases.get`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.leases.list`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.limitRanges.get`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.limitRanges.list`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.localSubjectAccessReviews.list`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.managedCertificates.get`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.managedCertificates.list`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.mutatingWebhookConfigurations.get`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.mutatingWebhookConfigurations.list`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.namespaces.get`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.namespaces.getStatus`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.namespaces.list`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.networkPolicies.get`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.networkPolicies.list`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.nodes.get`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.nodes.getStatus`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.nodes.list`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.operations.get`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.operations.list`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.persistentVolumeClaims.get`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.persistentVolumeClaims.getStatus`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.persistentVolumeClaims.list`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.persistentVolumes.get`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.persistentVolumes.getStatus`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.persistentVolumes.list`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.petSets.get`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.petSets.list`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.podDisruptionBudgets.get`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.podDisruptionBudgets.getStatus`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.podDisruptionBudgets.list`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.podPresets.get`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.podPresets.list`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.podSecurityPolicies.get`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.podSecurityPolicies.list`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.podTemplates.get`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.podTemplates.list`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.pods.get`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.pods.getLogs` `container.pods.getStatus`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.pods.list`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.priorityClasses.get`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.priorityClasses.list`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.replicaSets.get`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.replicaSets.getScale` `container.replicaSets.getStatus`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.replicaSets.list`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.replicationControllers.get`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.replicationControllers.getScale` `container.replicationControllers.getStatus`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.replicationControllers.list`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.resourceQuotas.get`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.resourceQuotas.getStatus`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.resourceQuotas.list`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.roleBindings.get`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.roleBindings.list`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.roles.get`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.roles.list`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.runtimeClasses.get`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.runtimeClasses.list`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.scheduledJobs.get`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.scheduledJobs.list`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.selfSubjectAccessReviews.create`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.selfSubjectAccessReviews.list`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.selfSubjectRulesReviews.create`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.serviceAccounts.get`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.serviceAccounts.list`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.services.get`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.services.getStatus`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.services.list`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.statefulSets.get`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.statefulSets.getScale` `container.statefulSets.getStatus`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.statefulSets.list`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.storageClasses.get`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.storageClasses.list`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.storageStates.get`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.storageStates.getStatus`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.storageStates.list`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.storageVersionMigrations.get`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.storageVersionMigrations.getStatus`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.storageVersionMigrations.list`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.subjectAccessReviews.list`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.thirdPartyObjects.get`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.thirdPartyObjects.list`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.thirdPartyResources.get`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.thirdPartyResources.list`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.tokenReviews.create`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.updateInfos.get`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.updateInfos.list`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.validatingWebhookConfigurations.get`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.validatingWebhookConfigurations.list`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.volumeAttachments.get`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.volumeAttachments.getStatus`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.volumeAttachments.list`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.volumeSnapshotClasses.get`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.volumeSnapshotClasses.list`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.volumeSnapshotContents.get`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.volumeSnapshotContents.getStatus`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.volumeSnapshotContents.list`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.volumeSnapshots.get`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.volumeSnapshots.getStatus`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.volumeSnapshots.list`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why
`container.clusters.getIamPolicy`	Master Authorized Network, Cluster Encryption Enabled, Node Encryption Enabled, Binary Authorization Enabled, Cluster Labels Added, private-cluster and logging checks. Assets: gcp_kubernetes_cluster, node pools. Why

Dataflow (2)¶

Permission	Findings / asset discovery
`dataflow.jobs.get`	Dataflow job asset discovery and worker-configuration checks. Why
`dataflow.jobs.list`	Dataflow job asset discovery and worker-configuration checks. Why

Dataplex (2)¶

Permission	Findings / asset discovery
`dataplex.entryGroups.get`	Dataplex asset discovery. Why
`dataplex.entryGroups.list`	Dataplex asset discovery. Why

Dataproc (2)¶

Permission	Findings / asset discovery
`dataproc.clusters.getIamPolicy`	Dataproc Cluster CMK Encryption, public-endpoint checks. Asset: gcp_dataproc_cluster. Why
`dataproc.clusters.list`	Dataproc Cluster CMK Encryption, public-endpoint checks. Asset: gcp_dataproc_cluster. Why

Deployment Manager (3)¶

Permission	Findings / asset discovery
`deploymentmanager.deployments.get`	Deployment asset discovery and drift attribution. Why
`deploymentmanager.deployments.getIamPolicy`	Deployment asset discovery and drift attribution. Why
`deploymentmanager.deployments.list`	Deployment asset discovery and drift attribution. Why

Cloud DNS (7)¶

Permission	Findings / asset discovery
`dns.managedZones.list`	DNS Security Enabled, DNSSEC Signing Algorithm, VPC DNS Logging Enabled. Assets: gcp_dns_managed_zone, gcp_dns_policy. Why
`dns.policies.list`	DNS Security Enabled, DNSSEC Signing Algorithm, VPC DNS Logging Enabled. Assets: gcp_dns_managed_zone, gcp_dns_policy. Why
`dns.resourceRecordSets.list`	DNS Security Enabled, DNSSEC Signing Algorithm, VPC DNS Logging Enabled. Assets: gcp_dns_managed_zone, gcp_dns_policy. Why
`dns.responsePolicies.get`	DNS Security Enabled, DNSSEC Signing Algorithm, VPC DNS Logging Enabled. Assets: gcp_dns_managed_zone, gcp_dns_policy. Why
`dns.responsePolicies.list`	DNS Security Enabled, DNSSEC Signing Algorithm, VPC DNS Logging Enabled. Assets: gcp_dns_managed_zone, gcp_dns_policy. Why
`dns.responsePolicyRules.get`	DNS Security Enabled, DNSSEC Signing Algorithm, VPC DNS Logging Enabled. Assets: gcp_dns_managed_zone, gcp_dns_policy. Why
`dns.responsePolicyRules.list`	DNS Security Enabled, DNSSEC Signing Algorithm, VPC DNS Logging Enabled. Assets: gcp_dns_managed_zone, gcp_dns_policy. Why

Essential Contacts (2)¶

Permission	Findings / asset discovery
`essentialcontacts.contacts.get`	Essential Contacts Configured. Why
`essentialcontacts.contacts.list`	Essential Contacts Configured. Why

GKE Hub / Fleet (2)¶

Permission	Findings / asset discovery
`gkehub.features.get`	Fleet membership asset discovery. Why
`gkehub.features.list`	Fleet membership asset discovery. Why

IAM - service accounts, keys, roles, workload identity (43)¶

Permission	Findings / asset discovery
`iam.accesspolicies.get`	Service Account Managed Keys, Service Account Key Rotation, Service Account Admin, Service Account User, Service Account Role, Service Account Separation, Member Admin, Workload Identity Federation trust checks. Assets: gcp_service_account, gcp_service_account_key, gcp_iam_role, workload identity pools/providers. Why
`iam.accesspolicies.list`	Service Account Managed Keys, Service Account Key Rotation, Service Account Admin, Service Account User, Service Account Role, Service Account Separation, Member Admin, Workload Identity Federation trust checks. Assets: gcp_service_account, gcp_service_account_key, gcp_iam_role, workload identity pools/providers. Why
`iam.accesspolicies.searchPolicyBindings`	Service Account Managed Keys, Service Account Key Rotation, Service Account Admin, Service Account User, Service Account Role, Service Account Separation, Member Admin, Workload Identity Federation trust checks. Assets: gcp_service_account, gcp_service_account_key, gcp_iam_role, workload identity pools/providers. Why
`iam.denypolicies.get`	Service Account Managed Keys, Service Account Key Rotation, Service Account Admin, Service Account User, Service Account Role, Service Account Separation, Member Admin, Workload Identity Federation trust checks. Assets: gcp_service_account, gcp_service_account_key, gcp_iam_role, workload identity pools/providers. Why
`iam.denypolicies.list`	Service Account Managed Keys, Service Account Key Rotation, Service Account Admin, Service Account User, Service Account Role, Service Account Separation, Member Admin, Workload Identity Federation trust checks. Assets: gcp_service_account, gcp_service_account_key, gcp_iam_role, workload identity pools/providers. Why
`iam.googleapis.com/oauthClientCredentials.get`	Service Account Managed Keys, Service Account Key Rotation, Service Account Admin, Service Account User, Service Account Role, Service Account Separation, Member Admin, Workload Identity Federation trust checks. Assets: gcp_service_account, gcp_service_account_key, gcp_iam_role, workload identity pools/providers. Why
`iam.googleapis.com/oauthClientCredentials.list`	Service Account Managed Keys, Service Account Key Rotation, Service Account Admin, Service Account User, Service Account Role, Service Account Separation, Member Admin, Workload Identity Federation trust checks. Assets: gcp_service_account, gcp_service_account_key, gcp_iam_role, workload identity pools/providers. Why
`iam.googleapis.com/oauthClients.get`	Service Account Managed Keys, Service Account Key Rotation, Service Account Admin, Service Account User, Service Account Role, Service Account Separation, Member Admin, Workload Identity Federation trust checks. Assets: gcp_service_account, gcp_service_account_key, gcp_iam_role, workload identity pools/providers. Why
`iam.googleapis.com/oauthClients.list`	Service Account Managed Keys, Service Account Key Rotation, Service Account Admin, Service Account User, Service Account Role, Service Account Separation, Member Admin, Workload Identity Federation trust checks. Assets: gcp_service_account, gcp_service_account_key, gcp_iam_role, workload identity pools/providers. Why
`iam.googleapis.com/workloadIdentityPoolManagedIdentities.get`	Service Account Managed Keys, Service Account Key Rotation, Service Account Admin, Service Account User, Service Account Role, Service Account Separation, Member Admin, Workload Identity Federation trust checks. Assets: gcp_service_account, gcp_service_account_key, gcp_iam_role, workload identity pools/providers. Why
`iam.googleapis.com/workloadIdentityPoolManagedIdentities.getAttestationRules`	Service Account Managed Keys, Service Account Key Rotation, Service Account Admin, Service Account User, Service Account Role, Service Account Separation, Member Admin, Workload Identity Federation trust checks. Assets: gcp_service_account, gcp_service_account_key, gcp_iam_role, workload identity pools/providers. Why
`iam.googleapis.com/workloadIdentityPoolManagedIdentities.list`	Service Account Managed Keys, Service Account Key Rotation, Service Account Admin, Service Account User, Service Account Role, Service Account Separation, Member Admin, Workload Identity Federation trust checks. Assets: gcp_service_account, gcp_service_account_key, gcp_iam_role, workload identity pools/providers. Why
`iam.googleapis.com/workloadIdentityPoolNamespaces.get`	Service Account Managed Keys, Service Account Key Rotation, Service Account Admin, Service Account User, Service Account Role, Service Account Separation, Member Admin, Workload Identity Federation trust checks. Assets: gcp_service_account, gcp_service_account_key, gcp_iam_role, workload identity pools/providers. Why
`iam.googleapis.com/workloadIdentityPoolNamespaces.list`	Service Account Managed Keys, Service Account Key Rotation, Service Account Admin, Service Account User, Service Account Role, Service Account Separation, Member Admin, Workload Identity Federation trust checks. Assets: gcp_service_account, gcp_service_account_key, gcp_iam_role, workload identity pools/providers. Why
`iam.googleapis.com/workloadIdentityPoolProviderKeys.get`	Service Account Managed Keys, Service Account Key Rotation, Service Account Admin, Service Account User, Service Account Role, Service Account Separation, Member Admin, Workload Identity Federation trust checks. Assets: gcp_service_account, gcp_service_account_key, gcp_iam_role, workload identity pools/providers. Why
`iam.googleapis.com/workloadIdentityPoolProviderKeys.list`	Service Account Managed Keys, Service Account Key Rotation, Service Account Admin, Service Account User, Service Account Role, Service Account Separation, Member Admin, Workload Identity Federation trust checks. Assets: gcp_service_account, gcp_service_account_key, gcp_iam_role, workload identity pools/providers. Why
`iam.googleapis.com/workloadIdentityPoolProviders.get` `iam.workloadIdentityPoolProviders.get`	Service Account Managed Keys, Service Account Key Rotation, Service Account Admin, Service Account User, Service Account Role, Service Account Separation, Member Admin, Workload Identity Federation trust checks. Assets: gcp_service_account, gcp_service_account_key, gcp_iam_role, workload identity pools/providers. Why
`iam.googleapis.com/workloadIdentityPoolProviders.list` `iam.workloadIdentityPoolProviders.list`	Service Account Managed Keys, Service Account Key Rotation, Service Account Admin, Service Account User, Service Account Role, Service Account Separation, Member Admin, Workload Identity Federation trust checks. Assets: gcp_service_account, gcp_service_account_key, gcp_iam_role, workload identity pools/providers. Why
`iam.googleapis.com/workloadIdentityPools.get` `iam.workloadIdentityPools.get`	Service Account Managed Keys, Service Account Key Rotation, Service Account Admin, Service Account User, Service Account Role, Service Account Separation, Member Admin, Workload Identity Federation trust checks. Assets: gcp_service_account, gcp_service_account_key, gcp_iam_role, workload identity pools/providers. Why
`iam.googleapis.com/workloadIdentityPools.getAttestationRules` `iam.workloadIdentityPools.searchPolicyBindings`	Service Account Managed Keys, Service Account Key Rotation, Service Account Admin, Service Account User, Service Account Role, Service Account Separation, Member Admin, Workload Identity Federation trust checks. Assets: gcp_service_account, gcp_service_account_key, gcp_iam_role, workload identity pools/providers. Why
`iam.googleapis.com/workloadIdentityPools.getIamPolicy`	Service Account Managed Keys, Service Account Key Rotation, Service Account Admin, Service Account User, Service Account Role, Service Account Separation, Member Admin, Workload Identity Federation trust checks. Assets: gcp_service_account, gcp_service_account_key, gcp_iam_role, workload identity pools/providers. Why
`iam.googleapis.com/workloadIdentityPools.list` `iam.workloadIdentityPools.list`	Service Account Managed Keys, Service Account Key Rotation, Service Account Admin, Service Account User, Service Account Role, Service Account Separation, Member Admin, Workload Identity Federation trust checks. Assets: gcp_service_account, gcp_service_account_key, gcp_iam_role, workload identity pools/providers. Why
`iam.policybindings.get`	Service Account Managed Keys, Service Account Key Rotation, Service Account Admin, Service Account User, Service Account Role, Service Account Separation, Member Admin, Workload Identity Federation trust checks. Assets: gcp_service_account, gcp_service_account_key, gcp_iam_role, workload identity pools/providers. Why
`iam.policybindings.list`	Service Account Managed Keys, Service Account Key Rotation, Service Account Admin, Service Account User, Service Account Role, Service Account Separation, Member Admin, Workload Identity Federation trust checks. Assets: gcp_service_account, gcp_service_account_key, gcp_iam_role, workload identity pools/providers. Why
`iam.principalaccessboundarypolicies.get`	Service Account Managed Keys, Service Account Key Rotation, Service Account Admin, Service Account User, Service Account Role, Service Account Separation, Member Admin, Workload Identity Federation trust checks. Assets: gcp_service_account, gcp_service_account_key, gcp_iam_role, workload identity pools/providers. Why
`iam.principalaccessboundarypolicies.list`	Service Account Managed Keys, Service Account Key Rotation, Service Account Admin, Service Account User, Service Account Role, Service Account Separation, Member Admin, Workload Identity Federation trust checks. Assets: gcp_service_account, gcp_service_account_key, gcp_iam_role, workload identity pools/providers. Why
`iam.principalaccessboundarypolicies.searchPolicyBindings`	Service Account Managed Keys, Service Account Key Rotation, Service Account Admin, Service Account User, Service Account Role, Service Account Separation, Member Admin, Workload Identity Federation trust checks. Assets: gcp_service_account, gcp_service_account_key, gcp_iam_role, workload identity pools/providers. Why
`iam.roles.get`	Service Account Managed Keys, Service Account Key Rotation, Service Account Admin, Service Account User, Service Account Role, Service Account Separation, Member Admin, Workload Identity Federation trust checks. Assets: gcp_service_account, gcp_service_account_key, gcp_iam_role, workload identity pools/providers. Why
`iam.roles.list`	Service Account Managed Keys, Service Account Key Rotation, Service Account Admin, Service Account User, Service Account Role, Service Account Separation, Member Admin, Workload Identity Federation trust checks. Assets: gcp_service_account, gcp_service_account_key, gcp_iam_role, workload identity pools/providers. Why
`iam.roles.listEffectiveTags` `iam.roles.listTagBindings`	Service Account Managed Keys, Service Account Key Rotation, Service Account Admin, Service Account User, Service Account Role, Service Account Separation, Member Admin, Workload Identity Federation trust checks. Assets: gcp_service_account, gcp_service_account_key, gcp_iam_role, workload identity pools/providers. Why
`iam.serviceAccountKeys.get`	Service Account Managed Keys, Service Account Key Rotation, Service Account Admin, Service Account User, Service Account Role, Service Account Separation, Member Admin, Workload Identity Federation trust checks. Assets: gcp_service_account, gcp_service_account_key, gcp_iam_role, workload identity pools/providers. Why
`iam.serviceAccountKeys.list`	Service Account Managed Keys, Service Account Key Rotation, Service Account Admin, Service Account User, Service Account Role, Service Account Separation, Member Admin, Workload Identity Federation trust checks. Assets: gcp_service_account, gcp_service_account_key, gcp_iam_role, workload identity pools/providers. Why
`iam.serviceAccounts.get`	Service Account Managed Keys, Service Account Key Rotation, Service Account Admin, Service Account User, Service Account Role, Service Account Separation, Member Admin, Workload Identity Federation trust checks. Assets: gcp_service_account, gcp_service_account_key, gcp_iam_role, workload identity pools/providers. Why
`iam.serviceAccounts.getIamPolicy`	Service Account Managed Keys, Service Account Key Rotation, Service Account Admin, Service Account User, Service Account Role, Service Account Separation, Member Admin, Workload Identity Federation trust checks. Assets: gcp_service_account, gcp_service_account_key, gcp_iam_role, workload identity pools/providers. Why
`iam.serviceAccounts.list`	Service Account Managed Keys, Service Account Key Rotation, Service Account Admin, Service Account User, Service Account Role, Service Account Separation, Member Admin, Workload Identity Federation trust checks. Assets: gcp_service_account, gcp_service_account_key, gcp_iam_role, workload identity pools/providers. Why
`iam.serviceAccounts.listEffectiveTags` `iam.serviceAccounts.listTagBindings`	Service Account Managed Keys, Service Account Key Rotation, Service Account Admin, Service Account User, Service Account Role, Service Account Separation, Member Admin, Workload Identity Federation trust checks. Assets: gcp_service_account, gcp_service_account_key, gcp_iam_role, workload identity pools/providers. Why

Cloud Logging (6)¶

Permission	Findings / asset discovery
`logging.buckets.get`	Log Sinks Enabled, Audit Logging Enabled, Storage Permissions Logging, VPC Network Logging, VPC Network Route Logging, VPC Firewall Rule Logging, Custom Role Logging, Project Ownership Logging, Audit Configuration Logging. Assets: gcp_logging_sink, gcp_logging_bucket, gcp_logging_metric. Why
`logging.buckets.list`	Log Sinks Enabled, Audit Logging Enabled, Storage Permissions Logging, VPC Network Logging, VPC Network Route Logging, VPC Firewall Rule Logging, Custom Role Logging, Project Ownership Logging, Audit Configuration Logging. Assets: gcp_logging_sink, gcp_logging_bucket, gcp_logging_metric. Why
`logging.logMetrics.list`	Log Sinks Enabled, Audit Logging Enabled, Storage Permissions Logging, VPC Network Logging, VPC Network Route Logging, VPC Firewall Rule Logging, Custom Role Logging, Project Ownership Logging, Audit Configuration Logging. Assets: gcp_logging_sink, gcp_logging_bucket, gcp_logging_metric. Why
`logging.queries.list`	Log Sinks Enabled, Audit Logging Enabled, Storage Permissions Logging, VPC Network Logging, VPC Network Route Logging, VPC Firewall Rule Logging, Custom Role Logging, Project Ownership Logging, Audit Configuration Logging. Assets: gcp_logging_sink, gcp_logging_bucket, gcp_logging_metric. Why
`logging.settings.get`	Log Sinks Enabled, Audit Logging Enabled, Storage Permissions Logging, VPC Network Logging, VPC Network Route Logging, VPC Firewall Rule Logging, Custom Role Logging, Project Ownership Logging, Audit Configuration Logging. Assets: gcp_logging_sink, gcp_logging_bucket, gcp_logging_metric. Why
`logging.sinks.list`	Log Sinks Enabled, Audit Logging Enabled, Storage Permissions Logging, VPC Network Logging, VPC Network Route Logging, VPC Firewall Rule Logging, Custom Role Logging, Project Ownership Logging, Audit Configuration Logging. Assets: gcp_logging_sink, gcp_logging_bucket, gcp_logging_metric. Why

Cloud Monitoring (3)¶

Permission	Findings / asset discovery
`monitoring.alertPolicies.list`	Log Alerts / Alert Policy Enabled checks that pair with the Cloud Logging metrics. Why
`monitoring.monitoredResourceDescriptors.list`	Log Alerts / Alert Policy Enabled checks that pair with the Cloud Logging metrics. Why
`monitoring.notificationChannels.list`	Log Alerts / Alert Policy Enabled checks that pair with the Cloud Logging metrics. Why

Network Connectivity Center (2)¶

Permission	Findings / asset discovery
`networkconnectivity.internalRanges.get`	Hub/spoke asset discovery. Why
`networkconnectivity.internalRanges.list`	Hub/spoke asset discovery. Why

Network Management (2)¶

Permission	Findings / asset discovery
`networkmanagement.connectivitytests.get`	Reachability validation supporting Internet Exposure. Why
`networkmanagement.connectivitytests.list`	Reachability validation supporting Internet Exposure. Why

Network Security (2)¶

Permission	Findings / asset discovery
`networksecurity.dnsThreatDetectors.get`	Security policy asset discovery and Cloud Armor coverage checks. Why
`networksecurity.dnsThreatDetectors.list`	Security policy asset discovery and Cloud Armor coverage checks. Why

Organization Policy (3)¶

Permission	Findings / asset discovery
`orgpolicy.constraints.list`	Org Policy constraint checks (external IP, SA key creation, shielded VM, uniform bucket access). Why
`orgpolicy.policies.list`	Org Policy constraint checks (external IP, SA key creation, shielded VM, uniform bucket access). Why
`orgpolicy.policy.get`	Org Policy constraint checks (external IP, SA key creation, shielded VM, uniform bucket access). Why

OS Config / VM Manager (2)¶

Permission	Findings / asset discovery
`osconfig.osPolicyAssignments.get`	Patch Management Enabled, OS inventory-based checks. Why
`osconfig.osPolicyAssignments.list`	Patch Management Enabled, OS inventory-based checks. Why

Pub/Sub (5)¶

Permission	Findings / asset discovery
`pubsub.snapshots.list`	Topic Encryption Enabled, Topic All Users Policy, Topic Labels Added, Subscription Encryption. Assets: gcp_pubsub_topic, gcp_pubsub_subscription. Why
`pubsub.subscriptions.getIamPolicy`	Topic Encryption Enabled, Topic All Users Policy, Topic Labels Added, Subscription Encryption. Assets: gcp_pubsub_topic, gcp_pubsub_subscription. Why
`pubsub.subscriptions.list`	Topic Encryption Enabled, Topic All Users Policy, Topic Labels Added, Subscription Encryption. Assets: gcp_pubsub_topic, gcp_pubsub_subscription. Why
`pubsub.topics.getIamPolicy`	Topic Encryption Enabled, Topic All Users Policy, Topic Labels Added, Subscription Encryption. Assets: gcp_pubsub_topic, gcp_pubsub_subscription. Why
`pubsub.topics.list`	Topic Encryption Enabled, Topic All Users Policy, Topic Labels Added, Subscription Encryption. Assets: gcp_pubsub_topic, gcp_pubsub_subscription. Why

Resource Manager (13)¶

Permission	Findings / asset discovery
`resourcemanager.hierarchyNodes.listEffectiveTags` `resourcemanager.hierarchyNodes.listTagBindings`	Member Admin, Service Account Separation, Project Ownership Logging, Audit Configuration Logging, Corporate Emails Only, Essential Contacts. Assets: gcp_project, gcp_iam_policy. Why
`resourcemanager.projects.get`	Member Admin, Service Account Separation, Project Ownership Logging, Audit Configuration Logging, Corporate Emails Only, Essential Contacts. Assets: gcp_project, gcp_iam_policy. Why
`resourcemanager.projects.getIamPolicy`	Member Admin, Service Account Separation, Project Ownership Logging, Audit Configuration Logging, Corporate Emails Only, Essential Contacts. Assets: gcp_project, gcp_iam_policy. Why
`resourcemanager.projects.searchPolicyBindings`	Member Admin, Service Account Separation, Project Ownership Logging, Audit Configuration Logging, Corporate Emails Only, Essential Contacts. Assets: gcp_project, gcp_iam_policy. Why
`resourcemanager.resourceTagBindings.list`	Member Admin, Service Account Separation, Project Ownership Logging, Audit Configuration Logging, Corporate Emails Only, Essential Contacts. Assets: gcp_project, gcp_iam_policy. Why
`resourcemanager.tagHolds.list`	Member Admin, Service Account Separation, Project Ownership Logging, Audit Configuration Logging, Corporate Emails Only, Essential Contacts. Assets: gcp_project, gcp_iam_policy. Why
`resourcemanager.tagKeys.get`	Member Admin, Service Account Separation, Project Ownership Logging, Audit Configuration Logging, Corporate Emails Only, Essential Contacts. Assets: gcp_project, gcp_iam_policy. Why
`resourcemanager.tagKeys.getIamPolicy`	Member Admin, Service Account Separation, Project Ownership Logging, Audit Configuration Logging, Corporate Emails Only, Essential Contacts. Assets: gcp_project, gcp_iam_policy. Why
`resourcemanager.tagKeys.list`	Member Admin, Service Account Separation, Project Ownership Logging, Audit Configuration Logging, Corporate Emails Only, Essential Contacts. Assets: gcp_project, gcp_iam_policy. Why
`resourcemanager.tagValues.get`	Member Admin, Service Account Separation, Project Ownership Logging, Audit Configuration Logging, Corporate Emails Only, Essential Contacts. Assets: gcp_project, gcp_iam_policy. Why
`resourcemanager.tagValues.getIamPolicy`	Member Admin, Service Account Separation, Project Ownership Logging, Audit Configuration Logging, Corporate Emails Only, Essential Contacts. Assets: gcp_project, gcp_iam_policy. Why
`resourcemanager.tagValues.list`	Member Admin, Service Account Separation, Project Ownership Logging, Audit Configuration Logging, Corporate Emails Only, Essential Contacts. Assets: gcp_project, gcp_iam_policy. Why

Secret Manager (5)¶

Permission	Findings / asset discovery
`secretmanager.secrets.get`	Secret Rotation Enabled, Secret Access Restricted, Secret CMK Encryption. Assets: gcp_secret_manager_secret. Why
`secretmanager.secrets.getIamPolicy`	Secret Rotation Enabled, Secret Access Restricted, Secret CMK Encryption. Assets: gcp_secret_manager_secret. Why
`secretmanager.secrets.list`	Secret Rotation Enabled, Secret Access Restricted, Secret CMK Encryption. Assets: gcp_secret_manager_secret. Why
`secretmanager.versions.get`	Secret Rotation Enabled, Secret Access Restricted, Secret CMK Encryption. Assets: gcp_secret_manager_secret. Why
`secretmanager.versions.list`	Secret Rotation Enabled, Secret Access Restricted, Secret CMK Encryption. Assets: gcp_secret_manager_secret. Why

Security Command Center (5)¶

Permission	Findings / asset discovery
`securitycenter.containerthreatdetectionsettings.get`	SCC finding ingestion and enablement checks. Why
`securitycenter.eventthreatdetectionsettings.get`	SCC finding ingestion and enablement checks. Why
`securitycenter.securityhealthanalyticssettings.get`	SCC finding ingestion and enablement checks. Why
`securitycenter.virtualmachinethreatdetectionsettings.get`	SCC finding ingestion and enablement checks. Why
`securitycenter.websecurityscannersettings.get`	SCC finding ingestion and enablement checks. Why

SCC Management (2)¶

Permission	Findings / asset discovery
`securitycentermanagement.securityCenterServices.get`	SCC enablement posture checks. Why
`securitycentermanagement.securityCenterServices.list`	SCC enablement posture checks. Why

Service Directory (6)¶

Permission	Findings / asset discovery
`servicedirectory.endpoints.get`	Asset discovery for gcp_service_directory_* plus public-access IAM checks. Why
`servicedirectory.endpoints.list`	Asset discovery for gcp_service_directory_* plus public-access IAM checks. Why
`servicedirectory.namespaces.get`	Asset discovery for gcp_service_directory_* plus public-access IAM checks. Why
`servicedirectory.namespaces.list`	Asset discovery for gcp_service_directory_* plus public-access IAM checks. Why
`servicedirectory.services.get`	Asset discovery for gcp_service_directory_* plus public-access IAM checks. Why
`servicedirectory.services.list`	Asset discovery for gcp_service_directory_* plus public-access IAM checks. Why

Service Management (2)¶

Permission	Findings / asset discovery
`servicemanagement.services.get`	Supporting data for API/service enablement checks. Why
`servicemanagement.services.list`	Supporting data for API/service enablement checks. Why

Service Networking (1)¶

Permission	Findings / asset discovery
`servicenetworking.services.get`	Private connection asset discovery. Why

Service Usage (1)¶

Permission	Findings / asset discovery
`serviceusage.services.list`	Drives scan scoping for every other service; API Enablement checks. Why

Cloud Spanner (2)¶

Permission	Findings / asset discovery
`spanner.instances.getIamPolicy`	Spanner asset discovery and CMEK checks. Asset: gcp_spanner_instance. Why
`spanner.instances.list`	Spanner asset discovery and CMEK checks. Asset: gcp_spanner_instance. Why

Cloud Storage (4)¶

Permission	Findings / asset discovery
`storage.buckets.get`	Bucket All Users Policy, Bucket Uniform Access, Bucket Versioning, Bucket Logging, Bucket CMK Encryption. Asset: gcp_storage_bucket. Why
`storage.buckets.getIamPolicy`	Bucket All Users Policy, Bucket Uniform Access, Bucket Versioning, Bucket Logging, Bucket CMK Encryption. Asset: gcp_storage_bucket. Why
`storage.buckets.list`	Bucket All Users Policy, Bucket Uniform Access, Bucket Versioning, Bucket Logging, Bucket CMK Encryption. Asset: gcp_storage_bucket. Why
`storage.objects.list`	Bucket All Users Policy, Bucket Uniform Access, Bucket Versioning, Bucket Logging, Bucket CMK Encryption. Asset: gcp_storage_bucket. Why