Add policy for gcp project iam policy

forseti-security · Mar 18, 2019 · 952f3c5 · 952f3c5
1 parent da0bd5f
commit 952f3c5
Showing 1 changed file with 10 additions and 0 deletions.
diff --git a/policy/cloudresourcemanager/common_iam.rego b/policy/cloudresourcemanager/common_iam.rego
@@ -0,0 +1,10 @@
+package gcp.cloudresourcemanager.projects.iam
+
+policies [policy_name] {
+    policy := data.gcp.cloudresourcemanager.projects.iam.policy[policy_name]
+}
+
+violations [policy_name] {
+    policy := data.gcp.cloudresourcemanager.projects.iam.policy[policy_name]
+    policy.valid != true
+}