IAM condition

Related topics

• IAM condition secures log view From the official documentation: “When you use this approach, to restrict a principal to having access to the log entries stored in a specific log view, you must add an IAM condition to the grant.”
• IAM condition configures role binding From the official documentation: “You can use tags and IAM conditions to conditionally grant role bindings to users in your hierarchy.”
• access level works with IAM condition From the official documentation: “Access Context Manager doesn't block deleting an access level that is referenced only by a [Google Cloud access binding](/access-context-manager/docs/manage-access-bindings) (which you can inspect by running `gcloud access-context-manager cloud-bindings list`) or an IAM…”
• IAM condition secures log bucket From the official documentation: “However, you can use IAM role grants with IAM conditions to restrict the actions that a principal can take on a log bucket.”
• log view is part of log bucket From the official documentation: “Each log bucket has a set of log views.”
• log bucket is part of Cloud Logging From the official documentation: “Cloud Logging log buckets can be configured to encrypt data with CMEK.”
• role binding is part of IAM policy From the official documentation: “Adds a new role binding to a policy.”
• access level secures Cloud Logging From the official documentation: “For this example, assume you want to create an access level that will allow a group of internal auditors to access the Cloud Logging service for a project named *sensitive-data*.”
• IAM policy configures log view From the official documentation: “- Create an IAM policy for the log view, and then add an IAM binding to that policy which grants the principal access to the log view.”