gcp-live-iam-policy-change-guard

【效率与协作】Gate IAM binding mutations, org policy changes, and Service Account key creation against the GCP resource hierarchy. IAM bindings at org level propagate to all folders and projects — this guard enforces blast-radius assessment, audit-trail confirmation, and explicit authority approval before any policy mutation is executed.

独立 GitHub 快照 · 自动分类 · 以原作者文档为准