Security 1 documented workflow

Cloud IAM

IAM policy API workflows for local development.

Documented workflows

1 workflows
  • getIamPolicy/setIamPolicy/testIamPermissions

Service boundaries

  • Role validation, conditions, and deny policies are not complete.
  • getIamPolicy/setIamPolicy/testIamPermissions: Permissive policy stub with local policy storage.
  • Audited metadata survives restart while the LocalCloud volume is retained
  • External runtime/data-plane side effects, if any, have separate lifecycle and recovery limits.

Next steps