Grant Terraform SA minimal set of permissions

GoogleCloudPlatform / bq-pii-classifier

Automatically discover and tag PII data across BigQuery tables and apply column-level access controls based on confidentiality level.

Apache License 2.0

46 stars 17 forks source link

Grant Terraform SA minimal set of permissions #150

Open kwadie opened 6 months ago

kwadie commented 6 months ago

Currently the Terraform service account used to deploy the solution requires roles/owner in the prepare_terraform_service_account.sh script which is quite broad. Customers\users deploying this requires a minimal set of roles to adhere to the least privilege principle.