No Personal Emails | Vulnerability Database

Not Proper Email Account In Use

Service accounts and user accounts used in IAM bindings should follow organization email policies (e.g., no personal emails).

Impact

Recommended Actions

Follow the appropriate remediation steps below to resolve the issue.

Use approved organizational email accounts for IAM bindings. Audit IAM policies to replace any personal or unapproved email accounts with proper service accounts or corporate emails.

1
2
3
4
5
6


resource "google_project_iam_binding" "good_example" {
  members = [
    "user:employee@company.com",
    "serviceAccount:service@company.iam.gserviceaccount.com",
  ]
}

1
2
3


resource "google_project_iam_member" "good_example" {
  member = "user:admin@organization.com"
}

Remediation Links

https://registry.terraform.io/providers/hashicorp/google/latest/docs/resources/google_project_iam#google_project_iam_binding