IAM Policy Non-Compliance Detected

Abierto

#39,869 abierto el 24/8/2026 0 comentarios 0 reacciones 0 asignados Ver en GitHub

Los mantenedores suelen responder en 1 día

Nadie ha tomado este issue todavía.

Evaluación

Dificultad: 4/5
Tiempo estimado: 3-5 días
Aptitud para principiantes: 35/100

Tipo de issue: Error
Claridad: Necesita aclaración
Estado de actividad: Activo
Stack tecnológico: gcp
Área: authorization, cloud, security

Línea de trabajo

Empieza leyendo ../iam/users.yml y comparando sus listas de roles con los permisos de GCP mostrados en el informe de auditoría. Aclara qué diferencias son intencionadas y si debería cambiar la fuente o la política de GCP; se considera terminado cuando el proyecto cumple las normas sin introducir acceso no autorizado.

Escrito por el modelo de indexación a partir del texto del issue.

Descripción

Compliance Audit Report (2026-10-05 09:21:28 UTC)

IAM policy for project apache-beam-testing is not compliant with the defined policies on ../iam/users.yml

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/artifactregistry.admin'}, {'role': 'roles/bigquery.admin'}, {'role': 'roles/cloudaicompanion.codeToolsAdmin'}, {'role': 'roles/container.admin'}, {'role': 'roles/editor'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/secretmanager.admin'}, {'role': 'roles/storage.objectAdmin'}, {'role': 'roles/storage.objectCreator'}]
In ../iam/users.yml: [{'role': 'roles/artifactregistry.admin'}, {'role': 'roles/bigquery.admin'}, {'role': 'roles/container.admin'}, {'role': 'roles/editor'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/secretmanager.admin'}, {'role': 'roles/storage.objectAdmin'}, {'role': 'roles/storage.objectCreator'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/cloudsql.instanceUser'}, {'role': 'roles/dataflow.admin'}, {'role': 'roles/iam.serviceAccountAdmin'}, {'role': 'roles/storage.admin'}, {'role': 'roles/viewer'}]
In ../iam/users.yml: [{'role': 'roles/cloudsql.instanceUser'}, {'role': 'roles/dataflow.admin'}, {'role': 'roles/iam.serviceAccountAdmin'}, {'role': 'roles/owner'}, {'role': 'roles/storage.admin'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/aiplatform.user'}, {'role': 'roles/alloydb.editor'}, {'role': 'roles/artifactregistry.createOnPushWriter'}, {'role': 'roles/artifactregistry.reader'}, {'role': 'roles/artifactregistry.repoAdmin'}, {'role': 'roles/artifactregistry.writer'}, {'role': 'roles/automlrecommendations.editor'}, {'role': 'roles/autoscaling.metricsWriter'}, {'role': 'roles/biglake.editor'}, {'role': 'roles/bigquery.dataEditor'}, {'role': 'roles/bigquery.user'}, {'role': 'roles/bigtable.admin'}, {'role': 'roles/cloudfunctions.invoker'}, {'role': 'roles/cloudkms.admin'}, {'role': 'roles/cloudkms.cryptoKeyEncrypterDecrypter'}, {'role': 'roles/cloudkms.orgServiceAgent'}, {'role': 'roles/cloudkms.serviceAgent'}, {'role': 'roles/cloudsql.editor'}, {'role': 'roles/compute.viewer'}, {'role': 'roles/container.serviceAgent'}, {'role': 'roles/datacatalog.editor'}, {'role': 'roles/dataflow.admin'}, {'role': 'roles/dataflow.developer'}, {'role': 'roles/dataproc.editor'}, {'role': 'roles/datastore.admin'}, {'role': 'roles/datastore.editor'}, {'role': 'roles/healthcare.dicomEditor'}, {'role': 'roles/healthcare.dicomStoreAdmin'}, {'role': 'roles/healthcare.fhirResourceEditor'}, {'role': 'roles/healthcare.fhirStoreAdmin'}, {'role': 'roles/healthcare.hl7V2Editor'}, {'role': 'roles/healthcare.hl7V2StoreAdmin'}, {'role': 'roles/iam.roleAdmin'}, {'role': 'roles/iam.serviceAccountTokenCreator'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/logging.logWriter'}, {'role': 'roles/managedkafka.admin'}, {'role': 'roles/managedkafka.client'}, {'role': 'roles/managedkafka.schemaRegistryEditor'}, {'role': 'roles/monitoring.metricWriter'}, {'role': 'roles/monitoring.viewer'}, {'role': 'roles/pubsub.admin'}, {'role': 'roles/resourcemanager.projectIamAdmin'}, {'role': 'roles/secretmanager.admin'}, {'role': 'roles/spanner.databaseAdmin'}, {'role': 'roles/stackdriver.resourceMetadata.writer'}, {'role': 'roles/storage.admin'}]
In ../iam/users.yml: [{'role': 'roles/artifactregistry.createOnPushWriter'}, {'role': 'roles/artifactregistry.reader'}, {'role': 'roles/artifactregistry.writer'}, {'role': 'roles/autoscaling.metricsWriter'}, {'role': 'roles/bigquery.dataEditor'}, {'role': 'roles/bigtable.admin'}, {'role': 'roles/cloudfunctions.invoker'}, {'role': 'roles/compute.viewer'}, {'role': 'roles/container.serviceAgent'}, {'role': 'roles/dataflow.admin'}, {'role': 'roles/dataflow.developer'}, {'role': 'roles/dataproc.editor'}, {'role': 'roles/editor'}, {'role': 'roles/healthcare.fhirResourceEditor'}, {'role': 'roles/healthcare.fhirStoreAdmin'}, {'role': 'roles/iam.roleAdmin'}, {'role': 'roles/iam.serviceAccountTokenCreator'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/logging.logWriter'}, {'role': 'roles/managedkafka.admin'}, {'role': 'roles/managedkafka.client'}, {'role': 'roles/managedkafka.schemaRegistryEditor'}, {'role': 'roles/monitoring.metricWriter'}, {'role': 'roles/monitoring.viewer'}, {'role': 'roles/resourcemanager.projectIamAdmin'}, {'role': 'roles/secretmanager.admin'}, {'role': 'roles/spanner.databaseAdmin'}, {'role': 'roles/stackdriver.resourceMetadata.writer'}, {'role': 'roles/storage.admin'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/aiplatform.user'}, {'role': 'roles/artifactregistry.admin'}, {'role': 'roles/artifactregistry.createOnPushWriter'}, {'role': 'roles/bigquery.admin'}, {'role': 'roles/bigquery.dataEditor'}, {'role': 'roles/bigtable.admin'}, {'role': 'roles/bigtable.user'}, {'role': 'roles/cloudkms.admin'}, {'role': 'roles/cloudkms.autokeyAdmin'}, {'role': 'roles/cloudkms.cryptoKeyDecrypter'}, {'role': 'roles/cloudkms.cryptoKeyEncrypter'}, {'role': 'roles/cloudkms.cryptoOperator'}, {'role': 'roles/container.admin'}, {'role': 'roles/dataflow.admin'}, {'role': 'roles/healthcare.fhirResourceEditor'}, {'role': 'roles/healthcare.fhirStoreAdmin'}, {'role': 'roles/iam.serviceAccountTokenCreator'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/pubsub.admin'}, {'role': 'roles/secretmanager.admin'}, {'role': 'roles/spanner.admin'}, {'role': 'roles/storage.admin'}, {'role': 'roles/storage.folderAdmin'}, {'role': 'roles/viewer'}]
In ../iam/users.yml: [{'role': 'roles/aiplatform.user'}, {'role': 'roles/artifactregistry.admin'}, {'role': 'roles/artifactregistry.createOnPushWriter'}, {'role': 'roles/bigquery.admin'}, {'role': 'roles/bigquery.dataEditor'}, {'role': 'roles/bigtable.admin'}, {'role': 'roles/bigtable.user'}, {'role': 'roles/container.admin'}, {'role': 'roles/dataflow.admin'}, {'role': 'roles/healthcare.fhirResourceEditor'}, {'role': 'roles/healthcare.fhirStoreAdmin'}, {'role': 'roles/iam.serviceAccountTokenCreator'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/pubsub.admin'}, {'role': 'roles/secretmanager.admin'}, {'role': 'roles/spanner.admin'}, {'role': 'roles/storage.admin'}, {'role': 'roles/storage.folderAdmin'}, {'role': 'roles/viewer'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/compute.instanceAdmin.v1'}, {'role': 'roles/compute.networkViewer'}, {'role': 'roles/meshconfig.admin'}, {'role': 'roles/saasservicemgmt.admin'}, {'role': 'roles/storage.objectAdmin'}, {'role': 'roles/trafficdirector.client'}]
In ../iam/users.yml: [{'role': 'roles/compute.instanceAdmin.v1'}, {'role': 'roles/compute.networkViewer'}, {'role': 'roles/meshconfig.admin'}, {'role': 'roles/storage.objectAdmin'}, {'role': 'roles/trafficdirector.client'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/artifactregistry.admin'}, {'role': 'roles/artifactregistry.containerRegistryMigrationAdmin'}, {'role': 'roles/artifactregistry.createOnPushRepoAdmin'}, {'role': 'roles/artifactregistry.repoAdmin'}, {'role': 'roles/bigquery.dataOwner'}, {'role': 'roles/container.admin'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/owner'}, {'role': 'roles/resourcemanager.projectIamAdmin'}]
In ../iam/users.yml: [{'role': 'roles/bigquery.dataOwner'}, {'role': 'roles/container.admin'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/owner'}, {'role': 'roles/resourcemanager.projectIamAdmin'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'projects/apache-beam-testing/roles/beam_infra_manager'}, {'role': 'roles/serviceusage.apiKeysViewer'}, {'role': 'roles/viewer'}]
In ../iam/users.yml: [{'role': 'projects/apache-beam-testing/roles/beam_infra_manager'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/container.admin'}, {'role': 'roles/editor'}, {'role': 'roles/viewer'}]
In ../iam/users.yml: [{'role': 'roles/container.admin'}, {'role': 'roles/editor'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/alloydb.admin'}, {'role': 'roles/bigquery.admin'}, {'role': 'roles/compute.networkAdmin'}, {'role': 'roles/dataflow.admin'}, {'role': 'roles/editor'}, {'role': 'roles/pubsub.admin'}, {'role': 'roles/storage.objectAdmin'}]
In ../iam/users.yml: [{'role': 'roles/bigquery.admin'}, {'role': 'roles/dataflow.admin'}, {'role': 'roles/pubsub.admin'}, {'role': 'roles/storage.objectAdmin'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/editor'}, {'role': 'roles/iam.workloadIdentityPoolAdmin'}, {'role': 'roles/secretmanager.admin'}, {'role': 'roles/viewer'}]
In ../iam/users.yml: [{'role': 'roles/editor'}, {'role': 'roles/iam.workloadIdentityPoolAdmin'}, {'role': 'roles/secretmanager.admin'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'organizations/433637338589/roles/GcsBucketOwner'}, {'role': 'roles/alloydb.admin'}, {'role': 'roles/artifactregistry.admin'}, {'role': 'roles/biglake.admin'}, {'role': 'roles/bigquery.admin'}, {'role': 'roles/dataproc.admin'}, {'role': 'roles/editor'}, {'role': 'roles/iam.securityAdmin'}, {'role': 'roles/owner'}, {'role': 'roles/pubsub.admin'}, {'role': 'roles/run.admin'}, {'role': 'roles/storage.admin'}]
In ../iam/users.yml: [{'role': 'organizations/433637338589/roles/GcsBucketOwner'}, {'role': 'roles/alloydb.admin'}, {'role': 'roles/artifactregistry.admin'}, {'role': 'roles/biglake.admin'}, {'role': 'roles/bigquery.admin'}, {'role': 'roles/dataproc.admin'}, {'role': 'roles/editor'}, {'role': 'roles/owner'}, {'role': 'roles/pubsub.admin'}, {'role': 'roles/storage.admin'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/alloydb.admin'}, {'role': 'roles/artifactregistry.admin'}, {'role': 'roles/artifactregistry.writer'}, {'role': 'roles/biglake.admin'}, {'role': 'roles/bigquery.admin'}, {'role': 'roles/compute.admin'}, {'role': 'roles/config.admin'}, {'role': 'roles/config.agent'}, {'role': 'roles/dataflow.worker'}, {'role': 'roles/iam.serviceAccountAdmin'}, {'role': 'roles/iam.serviceAccountTokenCreator'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/logging.logWriter'}, {'role': 'roles/monitoring.metricWriter'}, {'role': 'roles/owner'}, {'role': 'roles/pubsub.admin'}, {'role': 'roles/pubsub.subscriber'}, {'role': 'roles/resourcemanager.projectIamAdmin'}, {'role': 'roles/run.admin'}, {'role': 'roles/storage.admin'}, {'role': 'roles/tpu.admin'}]
In ../iam/users.yml: [{'role': 'roles/alloydb.admin'}, {'role': 'roles/artifactregistry.admin'}, {'role': 'roles/biglake.admin'}, {'role': 'roles/bigquery.admin'}, {'role': 'roles/dataflow.worker'}, {'role': 'roles/iam.serviceAccountAdmin'}, {'role': 'roles/logging.logWriter'}, {'role': 'roles/monitoring.metricWriter'}, {'role': 'roles/pubsub.admin'}, {'role': 'roles/pubsub.subscriber'}, {'role': 'roles/resourcemanager.projectIamAdmin'}, {'role': 'roles/storage.admin'}, {'role': 'roles/tpu.admin'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/cloudaicompanion.codeToolsAdmin'}, {'role': 'roles/container.admin'}, {'role': 'roles/editor'}, {'role': 'roles/iam.serviceAccountAdmin'}, {'role': 'roles/iam.workloadIdentityPoolAdmin'}, {'role': 'roles/secretmanager.secretAccessor'}]
In ../iam/users.yml: [{'role': 'roles/container.admin'}, {'role': 'roles/editor'}, {'role': 'roles/iam.serviceAccountAdmin'}, {'role': 'roles/iam.workloadIdentityPoolAdmin'}, {'role': 'roles/secretmanager.secretAccessor'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/editor'}, {'role': 'roles/viewer'}]
In ../iam/users.yml: [{'role': 'roles/editor'}]

History

Click to expand

Compliance Audit Report (2026-09-28 09:19:00 UTC)

IAM policy for project apache-beam-testing is not compliant with the defined policies on ../iam/users.yml

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/artifactregistry.admin'}, {'role': 'roles/bigquery.admin'}, {'role': 'roles/cloudaicompanion.codeToolsAdmin'}, {'role': 'roles/container.admin'}, {'role': 'roles/editor'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/secretmanager.admin'}, {'role': 'roles/storage.objectAdmin'}, {'role': 'roles/storage.objectCreator'}]
In ../iam/users.yml: [{'role': 'roles/artifactregistry.admin'}, {'role': 'roles/bigquery.admin'}, {'role': 'roles/container.admin'}, {'role': 'roles/editor'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/secretmanager.admin'}, {'role': 'roles/storage.objectAdmin'}, {'role': 'roles/storage.objectCreator'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/cloudsql.instanceUser'}, {'role': 'roles/dataflow.admin'}, {'role': 'roles/iam.serviceAccountAdmin'}, {'role': 'roles/storage.admin'}, {'role': 'roles/viewer'}]
In ../iam/users.yml: [{'role': 'roles/cloudsql.instanceUser'}, {'role': 'roles/dataflow.admin'}, {'role': 'roles/iam.serviceAccountAdmin'}, {'role': 'roles/owner'}, {'role': 'roles/storage.admin'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/aiplatform.user'}, {'role': 'roles/artifactregistry.createOnPushWriter'}, {'role': 'roles/artifactregistry.reader'}, {'role': 'roles/artifactregistry.repoAdmin'}, {'role': 'roles/artifactregistry.writer'}, {'role': 'roles/automlrecommendations.editor'}, {'role': 'roles/autoscaling.metricsWriter'}, {'role': 'roles/biglake.editor'}, {'role': 'roles/bigquery.dataEditor'}, {'role': 'roles/bigquery.user'}, {'role': 'roles/bigtable.admin'}, {'role': 'roles/cloudfunctions.invoker'}, {'role': 'roles/cloudkms.admin'}, {'role': 'roles/cloudkms.cryptoKeyEncrypterDecrypter'}, {'role': 'roles/cloudkms.orgServiceAgent'}, {'role': 'roles/cloudkms.serviceAgent'}, {'role': 'roles/compute.viewer'}, {'role': 'roles/container.serviceAgent'}, {'role': 'roles/dataflow.admin'}, {'role': 'roles/dataflow.developer'}, {'role': 'roles/dataproc.editor'}, {'role': 'roles/datastore.admin'}, {'role': 'roles/datastore.editor'}, {'role': 'roles/healthcare.dicomEditor'}, {'role': 'roles/healthcare.dicomStoreAdmin'}, {'role': 'roles/healthcare.fhirResourceEditor'}, {'role': 'roles/healthcare.fhirStoreAdmin'}, {'role': 'roles/healthcare.hl7V2Editor'}, {'role': 'roles/healthcare.hl7V2StoreAdmin'}, {'role': 'roles/iam.roleAdmin'}, {'role': 'roles/iam.serviceAccountTokenCreator'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/logging.logWriter'}, {'role': 'roles/managedkafka.admin'}, {'role': 'roles/managedkafka.client'}, {'role': 'roles/managedkafka.schemaRegistryEditor'}, {'role': 'roles/monitoring.metricWriter'}, {'role': 'roles/monitoring.viewer'}, {'role': 'roles/pubsub.admin'}, {'role': 'roles/resourcemanager.projectIamAdmin'}, {'role': 'roles/secretmanager.admin'}, {'role': 'roles/spanner.databaseAdmin'}, {'role': 'roles/stackdriver.resourceMetadata.writer'}, {'role': 'roles/storage.admin'}]
In ../iam/users.yml: [{'role': 'roles/artifactregistry.createOnPushWriter'}, {'role': 'roles/artifactregistry.reader'}, {'role': 'roles/artifactregistry.writer'}, {'role': 'roles/autoscaling.metricsWriter'}, {'role': 'roles/bigquery.dataEditor'}, {'role': 'roles/bigtable.admin'}, {'role': 'roles/cloudfunctions.invoker'}, {'role': 'roles/compute.viewer'}, {'role': 'roles/container.serviceAgent'}, {'role': 'roles/dataflow.admin'}, {'role': 'roles/dataflow.developer'}, {'role': 'roles/dataproc.editor'}, {'role': 'roles/editor'}, {'role': 'roles/healthcare.fhirResourceEditor'}, {'role': 'roles/healthcare.fhirStoreAdmin'}, {'role': 'roles/iam.roleAdmin'}, {'role': 'roles/iam.serviceAccountTokenCreator'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/logging.logWriter'}, {'role': 'roles/managedkafka.admin'}, {'role': 'roles/managedkafka.client'}, {'role': 'roles/managedkafka.schemaRegistryEditor'}, {'role': 'roles/monitoring.metricWriter'}, {'role': 'roles/monitoring.viewer'}, {'role': 'roles/resourcemanager.projectIamAdmin'}, {'role': 'roles/secretmanager.admin'}, {'role': 'roles/spanner.databaseAdmin'}, {'role': 'roles/stackdriver.resourceMetadata.writer'}, {'role': 'roles/storage.admin'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/aiplatform.user'}, {'role': 'roles/artifactregistry.admin'}, {'role': 'roles/artifactregistry.createOnPushWriter'}, {'role': 'roles/bigquery.admin'}, {'role': 'roles/bigquery.dataEditor'}, {'role': 'roles/bigtable.admin'}, {'role': 'roles/bigtable.user'}, {'role': 'roles/cloudkms.admin'}, {'role': 'roles/cloudkms.autokeyAdmin'}, {'role': 'roles/cloudkms.cryptoKeyDecrypter'}, {'role': 'roles/cloudkms.cryptoKeyEncrypter'}, {'role': 'roles/cloudkms.cryptoOperator'}, {'role': 'roles/container.admin'}, {'role': 'roles/dataflow.admin'}, {'role': 'roles/healthcare.fhirResourceEditor'}, {'role': 'roles/healthcare.fhirStoreAdmin'}, {'role': 'roles/iam.serviceAccountTokenCreator'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/pubsub.admin'}, {'role': 'roles/secretmanager.admin'}, {'role': 'roles/spanner.admin'}, {'role': 'roles/storage.admin'}, {'role': 'roles/storage.folderAdmin'}, {'role': 'roles/viewer'}]
In ../iam/users.yml: [{'role': 'roles/aiplatform.user'}, {'role': 'roles/artifactregistry.admin'}, {'role': 'roles/artifactregistry.createOnPushWriter'}, {'role': 'roles/bigquery.admin'}, {'role': 'roles/bigquery.dataEditor'}, {'role': 'roles/bigtable.admin'}, {'role': 'roles/bigtable.user'}, {'role': 'roles/container.admin'}, {'role': 'roles/dataflow.admin'}, {'role': 'roles/healthcare.fhirResourceEditor'}, {'role': 'roles/healthcare.fhirStoreAdmin'}, {'role': 'roles/iam.serviceAccountTokenCreator'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/pubsub.admin'}, {'role': 'roles/secretmanager.admin'}, {'role': 'roles/spanner.admin'}, {'role': 'roles/storage.admin'}, {'role': 'roles/storage.folderAdmin'}, {'role': 'roles/viewer'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/compute.instanceAdmin.v1'}, {'role': 'roles/compute.networkViewer'}, {'role': 'roles/meshconfig.admin'}, {'role': 'roles/saasservicemgmt.admin'}, {'role': 'roles/storage.objectAdmin'}, {'role': 'roles/trafficdirector.client'}]
In ../iam/users.yml: [{'role': 'roles/compute.instanceAdmin.v1'}, {'role': 'roles/compute.networkViewer'}, {'role': 'roles/meshconfig.admin'}, {'role': 'roles/storage.objectAdmin'}, {'role': 'roles/trafficdirector.client'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/artifactregistry.admin'}, {'role': 'roles/artifactregistry.containerRegistryMigrationAdmin'}, {'role': 'roles/artifactregistry.createOnPushRepoAdmin'}, {'role': 'roles/artifactregistry.repoAdmin'}, {'role': 'roles/bigquery.dataOwner'}, {'role': 'roles/container.admin'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/owner'}, {'role': 'roles/resourcemanager.projectIamAdmin'}]
In ../iam/users.yml: [{'role': 'roles/bigquery.dataOwner'}, {'role': 'roles/container.admin'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/owner'}, {'role': 'roles/resourcemanager.projectIamAdmin'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'projects/apache-beam-testing/roles/beam_infra_manager'}, {'role': 'roles/serviceusage.apiKeysViewer'}, {'role': 'roles/viewer'}]
In ../iam/users.yml: [{'role': 'projects/apache-beam-testing/roles/beam_infra_manager'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/container.admin'}, {'role': 'roles/editor'}, {'role': 'roles/viewer'}]
In ../iam/users.yml: [{'role': 'roles/container.admin'}, {'role': 'roles/editor'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/alloydb.admin'}, {'role': 'roles/bigquery.admin'}, {'role': 'roles/compute.networkAdmin'}, {'role': 'roles/dataflow.admin'}, {'role': 'roles/editor'}, {'role': 'roles/pubsub.admin'}, {'role': 'roles/storage.objectAdmin'}]
In ../iam/users.yml: [{'role': 'roles/bigquery.admin'}, {'role': 'roles/dataflow.admin'}, {'role': 'roles/pubsub.admin'}, {'role': 'roles/storage.objectAdmin'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/editor'}, {'role': 'roles/iam.workloadIdentityPoolAdmin'}, {'role': 'roles/secretmanager.admin'}, {'role': 'roles/viewer'}]
In ../iam/users.yml: [{'role': 'roles/editor'}, {'role': 'roles/iam.workloadIdentityPoolAdmin'}, {'role': 'roles/secretmanager.admin'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'organizations/433637338589/roles/GcsBucketOwner'}, {'role': 'roles/alloydb.admin'}, {'role': 'roles/artifactregistry.admin'}, {'role': 'roles/biglake.admin'}, {'role': 'roles/bigquery.admin'}, {'role': 'roles/dataproc.admin'}, {'role': 'roles/editor'}, {'role': 'roles/iam.securityAdmin'}, {'role': 'roles/owner'}, {'role': 'roles/pubsub.admin'}, {'role': 'roles/run.admin'}, {'role': 'roles/storage.admin'}]
In ../iam/users.yml: [{'role': 'organizations/433637338589/roles/GcsBucketOwner'}, {'role': 'roles/alloydb.admin'}, {'role': 'roles/artifactregistry.admin'}, {'role': 'roles/biglake.admin'}, {'role': 'roles/bigquery.admin'}, {'role': 'roles/dataproc.admin'}, {'role': 'roles/editor'}, {'role': 'roles/owner'}, {'role': 'roles/pubsub.admin'}, {'role': 'roles/storage.admin'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/alloydb.admin'}, {'role': 'roles/artifactregistry.admin'}, {'role': 'roles/artifactregistry.writer'}, {'role': 'roles/biglake.admin'}, {'role': 'roles/bigquery.admin'}, {'role': 'roles/compute.admin'}, {'role': 'roles/config.admin'}, {'role': 'roles/config.agent'}, {'role': 'roles/dataflow.worker'}, {'role': 'roles/iam.serviceAccountAdmin'}, {'role': 'roles/iam.serviceAccountTokenCreator'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/logging.logWriter'}, {'role': 'roles/monitoring.metricWriter'}, {'role': 'roles/owner'}, {'role': 'roles/pubsub.admin'}, {'role': 'roles/pubsub.subscriber'}, {'role': 'roles/resourcemanager.projectIamAdmin'}, {'role': 'roles/run.admin'}, {'role': 'roles/storage.admin'}, {'role': 'roles/tpu.admin'}]
In ../iam/users.yml: [{'role': 'roles/alloydb.admin'}, {'role': 'roles/artifactregistry.admin'}, {'role': 'roles/biglake.admin'}, {'role': 'roles/bigquery.admin'}, {'role': 'roles/dataflow.worker'}, {'role': 'roles/iam.serviceAccountAdmin'}, {'role': 'roles/logging.logWriter'}, {'role': 'roles/monitoring.metricWriter'}, {'role': 'roles/pubsub.admin'}, {'role': 'roles/pubsub.subscriber'}, {'role': 'roles/resourcemanager.projectIamAdmin'}, {'role': 'roles/storage.admin'}, {'role': 'roles/tpu.admin'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/cloudaicompanion.codeToolsAdmin'}, {'role': 'roles/container.admin'}, {'role': 'roles/editor'}, {'role': 'roles/iam.serviceAccountAdmin'}, {'role': 'roles/iam.workloadIdentityPoolAdmin'}, {'role': 'roles/secretmanager.secretAccessor'}]
In ../iam/users.yml: [{'role': 'roles/container.admin'}, {'role': 'roles/editor'}, {'role': 'roles/iam.serviceAccountAdmin'}, {'role': 'roles/iam.workloadIdentityPoolAdmin'}, {'role': 'roles/secretmanager.secretAccessor'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/editor'}, {'role': 'roles/viewer'}]
In ../iam/users.yml: [{'role': 'roles/editor'}]

Compliance Audit Report (2026-09-21 09:15:42 UTC)

IAM policy for project apache-beam-testing is not compliant with the defined policies on ../iam/users.yml

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/artifactregistry.admin'}, {'role': 'roles/bigquery.admin'}, {'role': 'roles/cloudaicompanion.codeToolsAdmin'}, {'role': 'roles/container.admin'}, {'role': 'roles/editor'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/secretmanager.admin'}, {'role': 'roles/storage.objectAdmin'}, {'role': 'roles/storage.objectCreator'}]
In ../iam/users.yml: [{'role': 'roles/artifactregistry.admin'}, {'role': 'roles/bigquery.admin'}, {'role': 'roles/container.admin'}, {'role': 'roles/editor'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/secretmanager.admin'}, {'role': 'roles/storage.objectAdmin'}, {'role': 'roles/storage.objectCreator'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/cloudsql.instanceUser'}, {'role': 'roles/dataflow.admin'}, {'role': 'roles/iam.serviceAccountAdmin'}, {'role': 'roles/storage.admin'}, {'role': 'roles/viewer'}]
In ../iam/users.yml: [{'role': 'roles/cloudsql.instanceUser'}, {'role': 'roles/dataflow.admin'}, {'role': 'roles/iam.serviceAccountAdmin'}, {'role': 'roles/owner'}, {'role': 'roles/storage.admin'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/artifactregistry.createOnPushWriter'}, {'role': 'roles/artifactregistry.reader'}, {'role': 'roles/artifactregistry.writer'}, {'role': 'roles/autoscaling.metricsWriter'}, {'role': 'roles/bigquery.dataEditor'}, {'role': 'roles/bigtable.admin'}, {'role': 'roles/cloudfunctions.invoker'}, {'role': 'roles/cloudkms.admin'}, {'role': 'roles/cloudkms.cryptoKeyEncrypterDecrypter'}, {'role': 'roles/cloudkms.orgServiceAgent'}, {'role': 'roles/cloudkms.serviceAgent'}, {'role': 'roles/compute.viewer'}, {'role': 'roles/container.serviceAgent'}, {'role': 'roles/dataflow.admin'}, {'role': 'roles/dataflow.developer'}, {'role': 'roles/dataproc.editor'}, {'role': 'roles/editor'}, {'role': 'roles/healthcare.fhirResourceEditor'}, {'role': 'roles/healthcare.fhirStoreAdmin'}, {'role': 'roles/iam.roleAdmin'}, {'role': 'roles/iam.serviceAccountTokenCreator'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/logging.logWriter'}, {'role': 'roles/managedkafka.admin'}, {'role': 'roles/managedkafka.client'}, {'role': 'roles/managedkafka.schemaRegistryEditor'}, {'role': 'roles/monitoring.metricWriter'}, {'role': 'roles/monitoring.viewer'}, {'role': 'roles/resourcemanager.projectIamAdmin'}, {'role': 'roles/secretmanager.admin'}, {'role': 'roles/spanner.databaseAdmin'}, {'role': 'roles/stackdriver.resourceMetadata.writer'}, {'role': 'roles/storage.admin'}]
In ../iam/users.yml: [{'role': 'roles/artifactregistry.createOnPushWriter'}, {'role': 'roles/artifactregistry.reader'}, {'role': 'roles/artifactregistry.writer'}, {'role': 'roles/autoscaling.metricsWriter'}, {'role': 'roles/bigquery.dataEditor'}, {'role': 'roles/bigtable.admin'}, {'role': 'roles/cloudfunctions.invoker'}, {'role': 'roles/compute.viewer'}, {'role': 'roles/container.serviceAgent'}, {'role': 'roles/dataflow.admin'}, {'role': 'roles/dataflow.developer'}, {'role': 'roles/dataproc.editor'}, {'role': 'roles/editor'}, {'role': 'roles/healthcare.fhirResourceEditor'}, {'role': 'roles/healthcare.fhirStoreAdmin'}, {'role': 'roles/iam.roleAdmin'}, {'role': 'roles/iam.serviceAccountTokenCreator'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/logging.logWriter'}, {'role': 'roles/managedkafka.admin'}, {'role': 'roles/managedkafka.client'}, {'role': 'roles/managedkafka.schemaRegistryEditor'}, {'role': 'roles/monitoring.metricWriter'}, {'role': 'roles/monitoring.viewer'}, {'role': 'roles/resourcemanager.projectIamAdmin'}, {'role': 'roles/secretmanager.admin'}, {'role': 'roles/spanner.databaseAdmin'}, {'role': 'roles/stackdriver.resourceMetadata.writer'}, {'role': 'roles/storage.admin'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/aiplatform.user'}, {'role': 'roles/artifactregistry.admin'}, {'role': 'roles/artifactregistry.createOnPushWriter'}, {'role': 'roles/bigquery.admin'}, {'role': 'roles/bigquery.dataEditor'}, {'role': 'roles/bigtable.admin'}, {'role': 'roles/bigtable.user'}, {'role': 'roles/cloudkms.admin'}, {'role': 'roles/cloudkms.autokeyAdmin'}, {'role': 'roles/cloudkms.cryptoKeyDecrypter'}, {'role': 'roles/cloudkms.cryptoKeyEncrypter'}, {'role': 'roles/cloudkms.cryptoOperator'}, {'role': 'roles/container.admin'}, {'role': 'roles/dataflow.admin'}, {'role': 'roles/healthcare.fhirResourceEditor'}, {'role': 'roles/healthcare.fhirStoreAdmin'}, {'role': 'roles/iam.serviceAccountTokenCreator'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/pubsub.admin'}, {'role': 'roles/secretmanager.admin'}, {'role': 'roles/spanner.admin'}, {'role': 'roles/storage.admin'}, {'role': 'roles/storage.folderAdmin'}, {'role': 'roles/viewer'}]
In ../iam/users.yml: [{'role': 'roles/aiplatform.user'}, {'role': 'roles/artifactregistry.admin'}, {'role': 'roles/artifactregistry.createOnPushWriter'}, {'role': 'roles/bigquery.admin'}, {'role': 'roles/bigquery.dataEditor'}, {'role': 'roles/bigtable.admin'}, {'role': 'roles/bigtable.user'}, {'role': 'roles/container.admin'}, {'role': 'roles/dataflow.admin'}, {'role': 'roles/healthcare.fhirResourceEditor'}, {'role': 'roles/healthcare.fhirStoreAdmin'}, {'role': 'roles/iam.serviceAccountTokenCreator'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/pubsub.admin'}, {'role': 'roles/secretmanager.admin'}, {'role': 'roles/spanner.admin'}, {'role': 'roles/storage.admin'}, {'role': 'roles/storage.folderAdmin'}, {'role': 'roles/viewer'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/compute.instanceAdmin.v1'}, {'role': 'roles/compute.networkViewer'}, {'role': 'roles/meshconfig.admin'}, {'role': 'roles/saasservicemgmt.admin'}, {'role': 'roles/storage.objectAdmin'}, {'role': 'roles/trafficdirector.client'}]
In ../iam/users.yml: [{'role': 'roles/compute.instanceAdmin.v1'}, {'role': 'roles/compute.networkViewer'}, {'role': 'roles/meshconfig.admin'}, {'role': 'roles/storage.objectAdmin'}, {'role': 'roles/trafficdirector.client'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/artifactregistry.admin'}, {'role': 'roles/artifactregistry.containerRegistryMigrationAdmin'}, {'role': 'roles/artifactregistry.createOnPushRepoAdmin'}, {'role': 'roles/artifactregistry.repoAdmin'}, {'role': 'roles/bigquery.dataOwner'}, {'role': 'roles/container.admin'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/owner'}, {'role': 'roles/resourcemanager.projectIamAdmin'}]
In ../iam/users.yml: [{'role': 'roles/bigquery.dataOwner'}, {'role': 'roles/container.admin'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/owner'}, {'role': 'roles/resourcemanager.projectIamAdmin'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'projects/apache-beam-testing/roles/beam_infra_manager'}, {'role': 'roles/serviceusage.apiKeysViewer'}, {'role': 'roles/viewer'}]
In ../iam/users.yml: [{'role': 'projects/apache-beam-testing/roles/beam_infra_manager'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/container.admin'}, {'role': 'roles/editor'}, {'role': 'roles/viewer'}]
In ../iam/users.yml: [{'role': 'roles/container.admin'}, {'role': 'roles/editor'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/alloydb.admin'}, {'role': 'roles/bigquery.admin'}, {'role': 'roles/compute.networkAdmin'}, {'role': 'roles/dataflow.admin'}, {'role': 'roles/editor'}, {'role': 'roles/pubsub.admin'}, {'role': 'roles/storage.objectAdmin'}]
In ../iam/users.yml: [{'role': 'roles/bigquery.admin'}, {'role': 'roles/dataflow.admin'}, {'role': 'roles/pubsub.admin'}, {'role': 'roles/storage.objectAdmin'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/editor'}, {'role': 'roles/iam.workloadIdentityPoolAdmin'}, {'role': 'roles/secretmanager.admin'}, {'role': 'roles/viewer'}]
In ../iam/users.yml: [{'role': 'roles/editor'}, {'role': 'roles/iam.workloadIdentityPoolAdmin'}, {'role': 'roles/secretmanager.admin'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'organizations/433637338589/roles/GcsBucketOwner'}, {'role': 'roles/alloydb.admin'}, {'role': 'roles/artifactregistry.admin'}, {'role': 'roles/biglake.admin'}, {'role': 'roles/bigquery.admin'}, {'role': 'roles/dataproc.admin'}, {'role': 'roles/editor'}, {'role': 'roles/iam.securityAdmin'}, {'role': 'roles/owner'}, {'role': 'roles/pubsub.admin'}, {'role': 'roles/run.admin'}, {'role': 'roles/storage.admin'}]
In ../iam/users.yml: [{'role': 'organizations/433637338589/roles/GcsBucketOwner'}, {'role': 'roles/alloydb.admin'}, {'role': 'roles/artifactregistry.admin'}, {'role': 'roles/biglake.admin'}, {'role': 'roles/bigquery.admin'}, {'role': 'roles/dataproc.admin'}, {'role': 'roles/editor'}, {'role': 'roles/owner'}, {'role': 'roles/pubsub.admin'}, {'role': 'roles/storage.admin'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/alloydb.admin'}, {'role': 'roles/artifactregistry.admin'}, {'role': 'roles/artifactregistry.writer'}, {'role': 'roles/biglake.admin'}, {'role': 'roles/bigquery.admin'}, {'role': 'roles/compute.admin'}, {'role': 'roles/config.admin'}, {'role': 'roles/config.agent'}, {'role': 'roles/dataflow.worker'}, {'role': 'roles/iam.serviceAccountAdmin'}, {'role': 'roles/iam.serviceAccountTokenCreator'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/logging.logWriter'}, {'role': 'roles/monitoring.metricWriter'}, {'role': 'roles/owner'}, {'role': 'roles/pubsub.admin'}, {'role': 'roles/pubsub.subscriber'}, {'role': 'roles/resourcemanager.projectIamAdmin'}, {'role': 'roles/run.admin'}, {'role': 'roles/storage.admin'}, {'role': 'roles/tpu.admin'}]
In ../iam/users.yml: [{'role': 'roles/alloydb.admin'}, {'role': 'roles/artifactregistry.admin'}, {'role': 'roles/biglake.admin'}, {'role': 'roles/bigquery.admin'}, {'role': 'roles/dataflow.worker'}, {'role': 'roles/iam.serviceAccountAdmin'}, {'role': 'roles/logging.logWriter'}, {'role': 'roles/monitoring.metricWriter'}, {'role': 'roles/pubsub.admin'}, {'role': 'roles/pubsub.subscriber'}, {'role': 'roles/resourcemanager.projectIamAdmin'}, {'role': 'roles/storage.admin'}, {'role': 'roles/tpu.admin'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/cloudaicompanion.codeToolsAdmin'}, {'role': 'roles/container.admin'}, {'role': 'roles/editor'}, {'role': 'roles/iam.serviceAccountAdmin'}, {'role': 'roles/iam.workloadIdentityPoolAdmin'}, {'role': 'roles/secretmanager.secretAccessor'}]
In ../iam/users.yml: [{'role': 'roles/container.admin'}, {'role': 'roles/editor'}, {'role': 'roles/iam.serviceAccountAdmin'}, {'role': 'roles/iam.workloadIdentityPoolAdmin'}, {'role': 'roles/secretmanager.secretAccessor'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/editor'}, {'role': 'roles/viewer'}]
In ../iam/users.yml: [{'role': 'roles/editor'}]

Compliance Audit Report (2026-09-14 09:15:25 UTC)

IAM policy for project apache-beam-testing is not compliant with the defined policies on ../iam/users.yml

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/artifactregistry.admin'}, {'role': 'roles/bigquery.admin'}, {'role': 'roles/cloudaicompanion.codeToolsAdmin'}, {'role': 'roles/container.admin'}, {'role': 'roles/editor'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/secretmanager.admin'}, {'role': 'roles/storage.objectAdmin'}, {'role': 'roles/storage.objectCreator'}]
In ../iam/users.yml: [{'role': 'roles/artifactregistry.admin'}, {'role': 'roles/bigquery.admin'}, {'role': 'roles/container.admin'}, {'role': 'roles/editor'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/secretmanager.admin'}, {'role': 'roles/storage.objectAdmin'}, {'role': 'roles/storage.objectCreator'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/cloudsql.instanceUser'}, {'role': 'roles/dataflow.admin'}, {'role': 'roles/iam.serviceAccountAdmin'}, {'role': 'roles/storage.admin'}, {'role': 'roles/viewer'}]
In ../iam/users.yml: [{'role': 'roles/cloudsql.instanceUser'}, {'role': 'roles/dataflow.admin'}, {'role': 'roles/iam.serviceAccountAdmin'}, {'role': 'roles/owner'}, {'role': 'roles/storage.admin'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/artifactregistry.createOnPushWriter'}, {'role': 'roles/artifactregistry.reader'}, {'role': 'roles/artifactregistry.writer'}, {'role': 'roles/autoscaling.metricsWriter'}, {'role': 'roles/bigquery.dataEditor'}, {'role': 'roles/bigtable.admin'}, {'role': 'roles/cloudfunctions.invoker'}, {'role': 'roles/cloudkms.admin'}, {'role': 'roles/cloudkms.cryptoKeyEncrypterDecrypter'}, {'role': 'roles/cloudkms.orgServiceAgent'}, {'role': 'roles/cloudkms.serviceAgent'}, {'role': 'roles/compute.viewer'}, {'role': 'roles/container.serviceAgent'}, {'role': 'roles/dataflow.admin'}, {'role': 'roles/dataflow.developer'}, {'role': 'roles/dataproc.editor'}, {'role': 'roles/editor'}, {'role': 'roles/healthcare.fhirResourceEditor'}, {'role': 'roles/healthcare.fhirStoreAdmin'}, {'role': 'roles/iam.roleAdmin'}, {'role': 'roles/iam.serviceAccountTokenCreator'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/logging.logWriter'}, {'role': 'roles/managedkafka.admin'}, {'role': 'roles/managedkafka.client'}, {'role': 'roles/managedkafka.schemaRegistryEditor'}, {'role': 'roles/monitoring.metricWriter'}, {'role': 'roles/monitoring.viewer'}, {'role': 'roles/resourcemanager.projectIamAdmin'}, {'role': 'roles/secretmanager.admin'}, {'role': 'roles/spanner.databaseAdmin'}, {'role': 'roles/stackdriver.resourceMetadata.writer'}, {'role': 'roles/storage.admin'}]
In ../iam/users.yml: [{'role': 'roles/artifactregistry.createOnPushWriter'}, {'role': 'roles/artifactregistry.reader'}, {'role': 'roles/artifactregistry.writer'}, {'role': 'roles/autoscaling.metricsWriter'}, {'role': 'roles/bigquery.dataEditor'}, {'role': 'roles/bigtable.admin'}, {'role': 'roles/cloudfunctions.invoker'}, {'role': 'roles/compute.viewer'}, {'role': 'roles/container.serviceAgent'}, {'role': 'roles/dataflow.admin'}, {'role': 'roles/dataflow.developer'}, {'role': 'roles/dataproc.editor'}, {'role': 'roles/editor'}, {'role': 'roles/healthcare.fhirResourceEditor'}, {'role': 'roles/healthcare.fhirStoreAdmin'}, {'role': 'roles/iam.roleAdmin'}, {'role': 'roles/iam.serviceAccountTokenCreator'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/logging.logWriter'}, {'role': 'roles/managedkafka.admin'}, {'role': 'roles/managedkafka.client'}, {'role': 'roles/managedkafka.schemaRegistryEditor'}, {'role': 'roles/monitoring.metricWriter'}, {'role': 'roles/monitoring.viewer'}, {'role': 'roles/resourcemanager.projectIamAdmin'}, {'role': 'roles/secretmanager.admin'}, {'role': 'roles/spanner.databaseAdmin'}, {'role': 'roles/stackdriver.resourceMetadata.writer'}, {'role': 'roles/storage.admin'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/aiplatform.user'}, {'role': 'roles/artifactregistry.admin'}, {'role': 'roles/artifactregistry.createOnPushWriter'}, {'role': 'roles/bigquery.admin'}, {'role': 'roles/bigquery.dataEditor'}, {'role': 'roles/bigtable.admin'}, {'role': 'roles/bigtable.user'}, {'role': 'roles/cloudkms.admin'}, {'role': 'roles/cloudkms.autokeyAdmin'}, {'role': 'roles/cloudkms.cryptoKeyDecrypter'}, {'role': 'roles/cloudkms.cryptoKeyEncrypter'}, {'role': 'roles/cloudkms.cryptoOperator'}, {'role': 'roles/container.admin'}, {'role': 'roles/dataflow.admin'}, {'role': 'roles/healthcare.fhirResourceEditor'}, {'role': 'roles/healthcare.fhirStoreAdmin'}, {'role': 'roles/iam.serviceAccountTokenCreator'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/pubsub.admin'}, {'role': 'roles/secretmanager.admin'}, {'role': 'roles/spanner.admin'}, {'role': 'roles/storage.admin'}, {'role': 'roles/storage.folderAdmin'}, {'role': 'roles/viewer'}]
In ../iam/users.yml: [{'role': 'roles/aiplatform.user'}, {'role': 'roles/artifactregistry.admin'}, {'role': 'roles/artifactregistry.createOnPushWriter'}, {'role': 'roles/bigquery.admin'}, {'role': 'roles/bigquery.dataEditor'}, {'role': 'roles/bigtable.admin'}, {'role': 'roles/bigtable.user'}, {'role': 'roles/container.admin'}, {'role': 'roles/dataflow.admin'}, {'role': 'roles/healthcare.fhirResourceEditor'}, {'role': 'roles/healthcare.fhirStoreAdmin'}, {'role': 'roles/iam.serviceAccountTokenCreator'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/pubsub.admin'}, {'role': 'roles/secretmanager.admin'}, {'role': 'roles/spanner.admin'}, {'role': 'roles/storage.admin'}, {'role': 'roles/storage.folderAdmin'}, {'role': 'roles/viewer'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/compute.instanceAdmin.v1'}, {'role': 'roles/compute.networkViewer'}, {'role': 'roles/meshconfig.admin'}, {'role': 'roles/saasservicemgmt.admin'}, {'role': 'roles/storage.objectAdmin'}, {'role': 'roles/trafficdirector.client'}]
In ../iam/users.yml: [{'role': 'roles/compute.instanceAdmin.v1'}, {'role': 'roles/compute.networkViewer'}, {'role': 'roles/meshconfig.admin'}, {'role': 'roles/storage.objectAdmin'}, {'role': 'roles/trafficdirector.client'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/artifactregistry.admin'}, {'role': 'roles/artifactregistry.containerRegistryMigrationAdmin'}, {'role': 'roles/artifactregistry.createOnPushRepoAdmin'}, {'role': 'roles/artifactregistry.repoAdmin'}, {'role': 'roles/bigquery.dataOwner'}, {'role': 'roles/container.admin'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/owner'}, {'role': 'roles/resourcemanager.projectIamAdmin'}]
In ../iam/users.yml: [{'role': 'roles/bigquery.dataOwner'}, {'role': 'roles/container.admin'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/owner'}, {'role': 'roles/resourcemanager.projectIamAdmin'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'projects/apache-beam-testing/roles/beam_infra_manager'}, {'role': 'roles/serviceusage.apiKeysViewer'}, {'role': 'roles/viewer'}]
In ../iam/users.yml: [{'role': 'projects/apache-beam-testing/roles/beam_infra_manager'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/container.admin'}, {'role': 'roles/editor'}, {'role': 'roles/viewer'}]
In ../iam/users.yml: [{'role': 'roles/container.admin'}, {'role': 'roles/editor'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/alloydb.admin'}, {'role': 'roles/bigquery.admin'}, {'role': 'roles/compute.networkAdmin'}, {'role': 'roles/dataflow.admin'}, {'role': 'roles/editor'}, {'role': 'roles/pubsub.admin'}, {'role': 'roles/storage.objectAdmin'}]
In ../iam/users.yml: [{'role': 'roles/bigquery.admin'}, {'role': 'roles/dataflow.admin'}, {'role': 'roles/pubsub.admin'}, {'role': 'roles/storage.objectAdmin'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/editor'}, {'role': 'roles/iam.workloadIdentityPoolAdmin'}, {'role': 'roles/secretmanager.admin'}, {'role': 'roles/viewer'}]
In ../iam/users.yml: [{'role': 'roles/editor'}, {'role': 'roles/iam.workloadIdentityPoolAdmin'}, {'role': 'roles/secretmanager.admin'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'organizations/433637338589/roles/GcsBucketOwner'}, {'role': 'roles/alloydb.admin'}, {'role': 'roles/artifactregistry.admin'}, {'role': 'roles/biglake.admin'}, {'role': 'roles/bigquery.admin'}, {'role': 'roles/dataproc.admin'}, {'role': 'roles/editor'}, {'role': 'roles/iam.securityAdmin'}, {'role': 'roles/owner'}, {'role': 'roles/pubsub.admin'}, {'role': 'roles/run.admin'}, {'role': 'roles/storage.admin'}]
In ../iam/users.yml: [{'role': 'organizations/433637338589/roles/GcsBucketOwner'}, {'role': 'roles/alloydb.admin'}, {'role': 'roles/artifactregistry.admin'}, {'role': 'roles/biglake.admin'}, {'role': 'roles/bigquery.admin'}, {'role': 'roles/dataproc.admin'}, {'role': 'roles/editor'}, {'role': 'roles/owner'}, {'role': 'roles/pubsub.admin'}, {'role': 'roles/storage.admin'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/alloydb.admin'}, {'role': 'roles/artifactregistry.admin'}, {'role': 'roles/artifactregistry.writer'}, {'role': 'roles/biglake.admin'}, {'role': 'roles/bigquery.admin'}, {'role': 'roles/compute.admin'}, {'role': 'roles/config.admin'}, {'role': 'roles/config.agent'}, {'role': 'roles/dataflow.worker'}, {'role': 'roles/iam.serviceAccountAdmin'}, {'role': 'roles/iam.serviceAccountTokenCreator'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/logging.logWriter'}, {'role': 'roles/monitoring.metricWriter'}, {'role': 'roles/owner'}, {'role': 'roles/pubsub.admin'}, {'role': 'roles/pubsub.subscriber'}, {'role': 'roles/resourcemanager.projectIamAdmin'}, {'role': 'roles/run.admin'}, {'role': 'roles/storage.admin'}, {'role': 'roles/tpu.admin'}]
In ../iam/users.yml: [{'role': 'roles/alloydb.admin'}, {'role': 'roles/artifactregistry.admin'}, {'role': 'roles/biglake.admin'}, {'role': 'roles/bigquery.admin'}, {'role': 'roles/dataflow.worker'}, {'role': 'roles/iam.serviceAccountAdmin'}, {'role': 'roles/logging.logWriter'}, {'role': 'roles/monitoring.metricWriter'}, {'role': 'roles/pubsub.admin'}, {'role': 'roles/pubsub.subscriber'}, {'role': 'roles/resourcemanager.projectIamAdmin'}, {'role': 'roles/storage.admin'}, {'role': 'roles/tpu.admin'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/cloudaicompanion.codeToolsAdmin'}, {'role': 'roles/container.admin'}, {'role': 'roles/editor'}, {'role': 'roles/iam.serviceAccountAdmin'}, {'role': 'roles/iam.workloadIdentityPoolAdmin'}, {'role': 'roles/secretmanager.secretAccessor'}]
In ../iam/users.yml: [{'role': 'roles/container.admin'}, {'role': 'roles/editor'}, {'role': 'roles/iam.serviceAccountAdmin'}, {'role': 'roles/iam.workloadIdentityPoolAdmin'}, {'role': 'roles/secretmanager.secretAccessor'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/editor'}, {'role': 'roles/viewer'}]
In ../iam/users.yml: [{'role': 'roles/editor'}]

Compliance Audit Report (2026-09-07 09:15:43 UTC)

IAM policy for project apache-beam-testing is not compliant with the defined policies on ../iam/users.yml

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/artifactregistry.admin'}, {'role': 'roles/bigquery.admin'}, {'role': 'roles/cloudaicompanion.codeToolsAdmin'}, {'role': 'roles/container.admin'}, {'role': 'roles/editor'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/secretmanager.admin'}, {'role': 'roles/storage.objectAdmin'}, {'role': 'roles/storage.objectCreator'}]
In ../iam/users.yml: [{'role': 'roles/artifactregistry.admin'}, {'role': 'roles/bigquery.admin'}, {'role': 'roles/container.admin'}, {'role': 'roles/editor'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/secretmanager.admin'}, {'role': 'roles/storage.objectAdmin'}, {'role': 'roles/storage.objectCreator'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/cloudsql.instanceUser'}, {'role': 'roles/dataflow.admin'}, {'role': 'roles/iam.serviceAccountAdmin'}, {'role': 'roles/storage.admin'}, {'role': 'roles/viewer'}]
In ../iam/users.yml: [{'role': 'roles/cloudsql.instanceUser'}, {'role': 'roles/dataflow.admin'}, {'role': 'roles/iam.serviceAccountAdmin'}, {'role': 'roles/owner'}, {'role': 'roles/storage.admin'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/artifactregistry.createOnPushWriter'}, {'role': 'roles/artifactregistry.reader'}, {'role': 'roles/artifactregistry.writer'}, {'role': 'roles/autoscaling.metricsWriter'}, {'role': 'roles/bigquery.dataEditor'}, {'role': 'roles/bigtable.admin'}, {'role': 'roles/cloudfunctions.invoker'}, {'role': 'roles/cloudkms.admin'}, {'role': 'roles/cloudkms.cryptoKeyEncrypterDecrypter'}, {'role': 'roles/cloudkms.orgServiceAgent'}, {'role': 'roles/cloudkms.serviceAgent'}, {'role': 'roles/compute.viewer'}, {'role': 'roles/container.serviceAgent'}, {'role': 'roles/dataflow.admin'}, {'role': 'roles/dataflow.developer'}, {'role': 'roles/dataproc.editor'}, {'role': 'roles/editor'}, {'role': 'roles/healthcare.fhirResourceEditor'}, {'role': 'roles/healthcare.fhirStoreAdmin'}, {'role': 'roles/iam.roleAdmin'}, {'role': 'roles/iam.serviceAccountTokenCreator'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/logging.logWriter'}, {'role': 'roles/managedkafka.admin'}, {'role': 'roles/managedkafka.client'}, {'role': 'roles/managedkafka.schemaRegistryEditor'}, {'role': 'roles/monitoring.metricWriter'}, {'role': 'roles/monitoring.viewer'}, {'role': 'roles/resourcemanager.projectIamAdmin'}, {'role': 'roles/secretmanager.admin'}, {'role': 'roles/spanner.databaseAdmin'}, {'role': 'roles/stackdriver.resourceMetadata.writer'}, {'role': 'roles/storage.admin'}]
In ../iam/users.yml: [{'role': 'roles/artifactregistry.createOnPushWriter'}, {'role': 'roles/artifactregistry.reader'}, {'role': 'roles/artifactregistry.writer'}, {'role': 'roles/autoscaling.metricsWriter'}, {'role': 'roles/bigquery.dataEditor'}, {'role': 'roles/bigtable.admin'}, {'role': 'roles/cloudfunctions.invoker'}, {'role': 'roles/compute.viewer'}, {'role': 'roles/container.serviceAgent'}, {'role': 'roles/dataflow.admin'}, {'role': 'roles/dataflow.developer'}, {'role': 'roles/dataproc.editor'}, {'role': 'roles/editor'}, {'role': 'roles/healthcare.fhirResourceEditor'}, {'role': 'roles/healthcare.fhirStoreAdmin'}, {'role': 'roles/iam.roleAdmin'}, {'role': 'roles/iam.serviceAccountTokenCreator'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/logging.logWriter'}, {'role': 'roles/managedkafka.admin'}, {'role': 'roles/managedkafka.client'}, {'role': 'roles/managedkafka.schemaRegistryEditor'}, {'role': 'roles/monitoring.metricWriter'}, {'role': 'roles/monitoring.viewer'}, {'role': 'roles/resourcemanager.projectIamAdmin'}, {'role': 'roles/secretmanager.admin'}, {'role': 'roles/spanner.databaseAdmin'}, {'role': 'roles/stackdriver.resourceMetadata.writer'}, {'role': 'roles/storage.admin'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/aiplatform.user'}, {'role': 'roles/artifactregistry.admin'}, {'role': 'roles/artifactregistry.createOnPushWriter'}, {'role': 'roles/bigquery.admin'}, {'role': 'roles/bigquery.dataEditor'}, {'role': 'roles/bigtable.admin'}, {'role': 'roles/bigtable.user'}, {'role': 'roles/cloudkms.admin'}, {'role': 'roles/cloudkms.autokeyAdmin'}, {'role': 'roles/cloudkms.cryptoKeyDecrypter'}, {'role': 'roles/cloudkms.cryptoKeyEncrypter'}, {'role': 'roles/cloudkms.cryptoOperator'}, {'role': 'roles/container.admin'}, {'role': 'roles/dataflow.admin'}, {'role': 'roles/healthcare.fhirResourceEditor'}, {'role': 'roles/healthcare.fhirStoreAdmin'}, {'role': 'roles/iam.serviceAccountTokenCreator'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/pubsub.admin'}, {'role': 'roles/secretmanager.admin'}, {'role': 'roles/spanner.admin'}, {'role': 'roles/storage.admin'}, {'role': 'roles/storage.folderAdmin'}, {'role': 'roles/viewer'}]
In ../iam/users.yml: [{'role': 'roles/aiplatform.user'}, {'role': 'roles/artifactregistry.admin'}, {'role': 'roles/artifactregistry.createOnPushWriter'}, {'role': 'roles/bigquery.admin'}, {'role': 'roles/bigquery.dataEditor'}, {'role': 'roles/bigtable.admin'}, {'role': 'roles/bigtable.user'}, {'role': 'roles/container.admin'}, {'role': 'roles/dataflow.admin'}, {'role': 'roles/healthcare.fhirResourceEditor'}, {'role': 'roles/healthcare.fhirStoreAdmin'}, {'role': 'roles/iam.serviceAccountTokenCreator'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/pubsub.admin'}, {'role': 'roles/secretmanager.admin'}, {'role': 'roles/spanner.admin'}, {'role': 'roles/storage.admin'}, {'role': 'roles/storage.folderAdmin'}, {'role': 'roles/viewer'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/compute.instanceAdmin.v1'}, {'role': 'roles/compute.networkViewer'}, {'role': 'roles/meshconfig.admin'}, {'role': 'roles/saasservicemgmt.admin'}, {'role': 'roles/storage.objectAdmin'}, {'role': 'roles/trafficdirector.client'}]
In ../iam/users.yml: [{'role': 'roles/compute.instanceAdmin.v1'}, {'role': 'roles/compute.networkViewer'}, {'role': 'roles/meshconfig.admin'}, {'role': 'roles/storage.objectAdmin'}, {'role': 'roles/trafficdirector.client'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/artifactregistry.admin'}, {'role': 'roles/artifactregistry.containerRegistryMigrationAdmin'}, {'role': 'roles/artifactregistry.createOnPushRepoAdmin'}, {'role': 'roles/artifactregistry.repoAdmin'}, {'role': 'roles/bigquery.dataOwner'}, {'role': 'roles/container.admin'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/owner'}, {'role': 'roles/resourcemanager.projectIamAdmin'}]
In ../iam/users.yml: [{'role': 'roles/bigquery.dataOwner'}, {'role': 'roles/container.admin'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/owner'}, {'role': 'roles/resourcemanager.projectIamAdmin'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'projects/apache-beam-testing/roles/beam_infra_manager'}, {'role': 'roles/serviceusage.apiKeysViewer'}, {'role': 'roles/viewer'}]
In ../iam/users.yml: [{'role': 'projects/apache-beam-testing/roles/beam_infra_manager'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/container.admin'}, {'role': 'roles/editor'}, {'role': 'roles/viewer'}]
In ../iam/users.yml: [{'role': 'roles/container.admin'}, {'role': 'roles/editor'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/alloydb.admin'}, {'role': 'roles/bigquery.admin'}, {'role': 'roles/compute.networkAdmin'}, {'role': 'roles/dataflow.admin'}, {'role': 'roles/editor'}, {'role': 'roles/pubsub.admin'}, {'role': 'roles/storage.objectAdmin'}]
In ../iam/users.yml: [{'role': 'roles/bigquery.admin'}, {'role': 'roles/dataflow.admin'}, {'role': 'roles/pubsub.admin'}, {'role': 'roles/storage.objectAdmin'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/editor'}, {'role': 'roles/iam.workloadIdentityPoolAdmin'}, {'role': 'roles/secretmanager.admin'}, {'role': 'roles/viewer'}]
In ../iam/users.yml: [{'role': 'roles/editor'}, {'role': 'roles/iam.workloadIdentityPoolAdmin'}, {'role': 'roles/secretmanager.admin'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'organizations/433637338589/roles/GcsBucketOwner'}, {'role': 'roles/alloydb.admin'}, {'role': 'roles/artifactregistry.admin'}, {'role': 'roles/biglake.admin'}, {'role': 'roles/bigquery.admin'}, {'role': 'roles/dataproc.admin'}, {'role': 'roles/editor'}, {'role': 'roles/iam.securityAdmin'}, {'role': 'roles/owner'}, {'role': 'roles/pubsub.admin'}, {'role': 'roles/run.admin'}, {'role': 'roles/storage.admin'}]
In ../iam/users.yml: [{'role': 'organizations/433637338589/roles/GcsBucketOwner'}, {'role': 'roles/alloydb.admin'}, {'role': 'roles/artifactregistry.admin'}, {'role': 'roles/biglake.admin'}, {'role': 'roles/bigquery.admin'}, {'role': 'roles/dataproc.admin'}, {'role': 'roles/editor'}, {'role': 'roles/owner'}, {'role': 'roles/pubsub.admin'}, {'role': 'roles/storage.admin'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/alloydb.admin'}, {'role': 'roles/artifactregistry.admin'}, {'role': 'roles/artifactregistry.writer'}, {'role': 'roles/biglake.admin'}, {'role': 'roles/bigquery.admin'}, {'role': 'roles/compute.admin'}, {'role': 'roles/config.admin'}, {'role': 'roles/config.agent'}, {'role': 'roles/dataflow.worker'}, {'role': 'roles/iam.serviceAccountAdmin'}, {'role': 'roles/iam.serviceAccountTokenCreator'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/logging.logWriter'}, {'role': 'roles/monitoring.metricWriter'}, {'role': 'roles/owner'}, {'role': 'roles/pubsub.admin'}, {'role': 'roles/pubsub.subscriber'}, {'role': 'roles/resourcemanager.projectIamAdmin'}, {'role': 'roles/run.admin'}, {'role': 'roles/storage.admin'}, {'role': 'roles/tpu.admin'}]
In ../iam/users.yml: [{'role': 'roles/alloydb.admin'}, {'role': 'roles/artifactregistry.admin'}, {'role': 'roles/biglake.admin'}, {'role': 'roles/bigquery.admin'}, {'role': 'roles/dataflow.worker'}, {'role': 'roles/iam.serviceAccountAdmin'}, {'role': 'roles/logging.logWriter'}, {'role': 'roles/monitoring.metricWriter'}, {'role': 'roles/pubsub.admin'}, {'role': 'roles/pubsub.subscriber'}, {'role': 'roles/resourcemanager.projectIamAdmin'}, {'role': 'roles/storage.admin'}, {'role': 'roles/tpu.admin'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/cloudaicompanion.codeToolsAdmin'}, {'role': 'roles/container.admin'}, {'role': 'roles/editor'}, {'role': 'roles/iam.serviceAccountAdmin'}, {'role': 'roles/iam.workloadIdentityPoolAdmin'}, {'role': 'roles/secretmanager.secretAccessor'}]
In ../iam/users.yml: [{'role': 'roles/container.admin'}, {'role': 'roles/editor'}, {'role': 'roles/iam.serviceAccountAdmin'}, {'role': 'roles/iam.workloadIdentityPoolAdmin'}, {'role': 'roles/secretmanager.secretAccessor'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/editor'}, {'role': 'roles/viewer'}]
In ../iam/users.yml: [{'role': 'roles/editor'}]

Compliance Audit Report (2026-08-31 09:16:03 UTC)

IAM policy for project apache-beam-testing is not compliant with the defined policies on ../iam/users.yml

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/artifactregistry.admin'}, {'role': 'roles/bigquery.admin'}, {'role': 'roles/cloudaicompanion.codeToolsAdmin'}, {'role': 'roles/container.admin'}, {'role': 'roles/editor'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/secretmanager.admin'}, {'role': 'roles/storage.objectAdmin'}, {'role': 'roles/storage.objectCreator'}]
In ../iam/users.yml: [{'role': 'roles/artifactregistry.admin'}, {'role': 'roles/bigquery.admin'}, {'role': 'roles/container.admin'}, {'role': 'roles/editor'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/secretmanager.admin'}, {'role': 'roles/storage.objectAdmin'}, {'role': 'roles/storage.objectCreator'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/cloudsql.instanceUser'}, {'role': 'roles/dataflow.admin'}, {'role': 'roles/iam.serviceAccountAdmin'}, {'role': 'roles/storage.admin'}, {'role': 'roles/viewer'}]
In ../iam/users.yml: [{'role': 'roles/cloudsql.instanceUser'}, {'role': 'roles/dataflow.admin'}, {'role': 'roles/iam.serviceAccountAdmin'}, {'role': 'roles/owner'}, {'role': 'roles/storage.admin'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/artifactregistry.createOnPushWriter'}, {'role': 'roles/artifactregistry.reader'}, {'role': 'roles/artifactregistry.writer'}, {'role': 'roles/autoscaling.metricsWriter'}, {'role': 'roles/bigquery.dataEditor'}, {'role': 'roles/bigtable.admin'}, {'role': 'roles/cloudfunctions.invoker'}, {'role': 'roles/cloudkms.admin'}, {'role': 'roles/cloudkms.cryptoKeyEncrypterDecrypter'}, {'role': 'roles/cloudkms.orgServiceAgent'}, {'role': 'roles/cloudkms.serviceAgent'}, {'role': 'roles/compute.viewer'}, {'role': 'roles/container.serviceAgent'}, {'role': 'roles/dataflow.admin'}, {'role': 'roles/dataflow.developer'}, {'role': 'roles/dataproc.editor'}, {'role': 'roles/editor'}, {'role': 'roles/healthcare.fhirResourceEditor'}, {'role': 'roles/healthcare.fhirStoreAdmin'}, {'role': 'roles/iam.roleAdmin'}, {'role': 'roles/iam.serviceAccountTokenCreator'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/logging.logWriter'}, {'role': 'roles/managedkafka.admin'}, {'role': 'roles/managedkafka.client'}, {'role': 'roles/managedkafka.schemaRegistryEditor'}, {'role': 'roles/monitoring.metricWriter'}, {'role': 'roles/monitoring.viewer'}, {'role': 'roles/resourcemanager.projectIamAdmin'}, {'role': 'roles/secretmanager.admin'}, {'role': 'roles/spanner.databaseAdmin'}, {'role': 'roles/stackdriver.resourceMetadata.writer'}, {'role': 'roles/storage.admin'}]
In ../iam/users.yml: [{'role': 'roles/artifactregistry.createOnPushWriter'}, {'role': 'roles/artifactregistry.reader'}, {'role': 'roles/artifactregistry.writer'}, {'role': 'roles/autoscaling.metricsWriter'}, {'role': 'roles/bigquery.dataEditor'}, {'role': 'roles/bigtable.admin'}, {'role': 'roles/cloudfunctions.invoker'}, {'role': 'roles/compute.viewer'}, {'role': 'roles/container.serviceAgent'}, {'role': 'roles/dataflow.admin'}, {'role': 'roles/dataflow.developer'}, {'role': 'roles/dataproc.editor'}, {'role': 'roles/editor'}, {'role': 'roles/healthcare.fhirResourceEditor'}, {'role': 'roles/healthcare.fhirStoreAdmin'}, {'role': 'roles/iam.roleAdmin'}, {'role': 'roles/iam.serviceAccountTokenCreator'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/logging.logWriter'}, {'role': 'roles/managedkafka.admin'}, {'role': 'roles/managedkafka.client'}, {'role': 'roles/managedkafka.schemaRegistryEditor'}, {'role': 'roles/monitoring.metricWriter'}, {'role': 'roles/monitoring.viewer'}, {'role': 'roles/resourcemanager.projectIamAdmin'}, {'role': 'roles/secretmanager.admin'}, {'role': 'roles/spanner.databaseAdmin'}, {'role': 'roles/stackdriver.resourceMetadata.writer'}, {'role': 'roles/storage.admin'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/aiplatform.user'}, {'role': 'roles/artifactregistry.admin'}, {'role': 'roles/artifactregistry.createOnPushWriter'}, {'role': 'roles/bigquery.admin'}, {'role': 'roles/bigquery.dataEditor'}, {'role': 'roles/bigtable.admin'}, {'role': 'roles/bigtable.user'}, {'role': 'roles/cloudkms.admin'}, {'role': 'roles/cloudkms.autokeyAdmin'}, {'role': 'roles/cloudkms.cryptoKeyDecrypter'}, {'role': 'roles/cloudkms.cryptoKeyEncrypter'}, {'role': 'roles/cloudkms.cryptoOperator'}, {'role': 'roles/container.admin'}, {'role': 'roles/dataflow.admin'}, {'role': 'roles/healthcare.fhirResourceEditor'}, {'role': 'roles/healthcare.fhirStoreAdmin'}, {'role': 'roles/iam.serviceAccountTokenCreator'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/pubsub.admin'}, {'role': 'roles/secretmanager.admin'}, {'role': 'roles/spanner.admin'}, {'role': 'roles/storage.admin'}, {'role': 'roles/storage.folderAdmin'}, {'role': 'roles/viewer'}]
In ../iam/users.yml: [{'role': 'roles/aiplatform.user'}, {'role': 'roles/artifactregistry.admin'}, {'role': 'roles/artifactregistry.createOnPushWriter'}, {'role': 'roles/bigquery.admin'}, {'role': 'roles/bigquery.dataEditor'}, {'role': 'roles/bigtable.admin'}, {'role': 'roles/bigtable.user'}, {'role': 'roles/container.admin'}, {'role': 'roles/dataflow.admin'}, {'role': 'roles/healthcare.fhirResourceEditor'}, {'role': 'roles/healthcare.fhirStoreAdmin'}, {'role': 'roles/iam.serviceAccountTokenCreator'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/pubsub.admin'}, {'role': 'roles/secretmanager.admin'}, {'role': 'roles/spanner.admin'}, {'role': 'roles/storage.admin'}, {'role': 'roles/storage.folderAdmin'}, {'role': 'roles/viewer'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/compute.instanceAdmin.v1'}, {'role': 'roles/compute.networkViewer'}, {'role': 'roles/meshconfig.admin'}, {'role': 'roles/saasservicemgmt.admin'}, {'role': 'roles/storage.objectAdmin'}, {'role': 'roles/trafficdirector.client'}]
In ../iam/users.yml: [{'role': 'roles/compute.instanceAdmin.v1'}, {'role': 'roles/compute.networkViewer'}, {'role': 'roles/meshconfig.admin'}, {'role': 'roles/storage.objectAdmin'}, {'role': 'roles/trafficdirector.client'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/artifactregistry.admin'}, {'role': 'roles/artifactregistry.containerRegistryMigrationAdmin'}, {'role': 'roles/artifactregistry.createOnPushRepoAdmin'}, {'role': 'roles/artifactregistry.repoAdmin'}, {'role': 'roles/bigquery.dataOwner'}, {'role': 'roles/container.admin'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/owner'}, {'role': 'roles/resourcemanager.projectIamAdmin'}]
In ../iam/users.yml: [{'role': 'roles/bigquery.dataOwner'}, {'role': 'roles/container.admin'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/owner'}, {'role': 'roles/resourcemanager.projectIamAdmin'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'projects/apache-beam-testing/roles/beam_infra_manager'}, {'role': 'roles/serviceusage.apiKeysViewer'}, {'role': 'roles/viewer'}]
In ../iam/users.yml: [{'role': 'projects/apache-beam-testing/roles/beam_infra_manager'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/container.admin'}, {'role': 'roles/editor'}, {'role': 'roles/viewer'}]
In ../iam/users.yml: [{'role': 'roles/container.admin'}, {'role': 'roles/editor'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'rol

Lenguaje dominante: Java
Estrellas: 8.7k
Forks: 4.7k
Merge medio: 2 d 7 h
PR fusionados (30 d): 290

Preparar el entorno

Sin Dockerfile ni archivo de Docker Compose
Tiene una plantilla de pull request
Leer la guía de contribución

Primeros pasos

Lee el issue completo y luego la guía de contribución del proyecto.
Comenta en el issue que vas a ocuparte — evita que dos personas hagan lo mismo.
Haz un fork del repositorio y trabaja en una rama.
Abre un pull request que haga referencia al número del issue.

Más de apache/beam

[Feature Request]: Support Protobuf 7.x in Python SDK
Posiblemente ocupada @sofiathoren la tomó hace 3 días. Abierto
- ¿Algo no está bien?
P2 python

Dificultad 2/5 1-3 horas Aptitud para principiantes 62/100

apache/beam#40580 · Abierto el 14/10/2026

Los mantenedores suelen responder en 1 día
[Bug]: Row.toString throws for an ITERABLE field that is not backed by a List
Posiblemente ocupada @PDGGK la tomó hace 64 días. Abierto
- ¿Algo no está bien?
java P3

Dificultad 2/5 1-3 horas Aptitud para principiantes 76/100

apache/beam#39749 · Abierto el 14/8/2026

Los mantenedores suelen responder en 1 día
Upgrade vendored grpc to remove vulnerabilities coming from netty
Abierto
- ¿Algo no está bien?
Dificultad 2/5 1-3 horas Aptitud para principiantes 68/100

apache/beam#39624 · 2 reacciones · Abierto el 5/8/2026

Los mantenedores suelen responder en 1 día
[Bug]: PubsubIO used in batch incorrect batch cutoff size
Posiblemente ocupada @1fanwang la tomó hace 53 días. Abierto
- ¿Algo no está bien?
bug io P3 pinned pubsub

Dificultad 2/5 1-3 horas Aptitud para principiantes 78/100

apache/beam#28011 · 4 comentarios · Abierto el 15/8/2023

Los mantenedores suelen responder en 1 día
Add Gradle instruction to Java quick start guide
Abierto
- ¿Algo no está bien?
build P3 sub-task

Dificultad 1/5 Menos de una hora Aptitud para principiantes 68/100

apache/beam#20256 · Abierto el 4/6/2022

Los mantenedores suelen responder en 1 día

Todos los issues de apache/beam

Issues similares

[LOOTRUN] Health Indicator has Small Range
Abierto
- ¿Algo no está bien?
Dificultad 2/5 1-3 horas Aptitud para principiantes 68/100

Vakore/ZappierGames#147 · Abierto el 18/10/2026
Post 1.11.2 to SpigotMC
Abierto
- ¿Algo no está bien?
spigotmc

Dificultad 1/5 Menos de una hora Aptitud para principiantes 92/100

Dans-Plugins/Wild-Pets#356 · Abierto el 18/10/2026

Los mantenedores suelen responder en 1 día
Post 1.16.2 to SpigotMC
Abierto
- ¿Algo no está bien?
spigotmc

Dificultad 1/5 Menos de una hora Aptitud para principiantes 85/100

Dans-Plugins/Medieval-Roleplay-Engine#371 · Abierto el 18/10/2026

Los mantenedores suelen responder en 1 día
[BUG] - Server unreachable dialog shows twice
Abierto
- ¿Algo no está bien?
bug

Dificultad 2/5 1-3 horas Aptitud para principiantes 84/100

eddyizm/tempus#1220 · 1 comentario · Abierto el 18/10/2026

Los mantenedores suelen responder en 2 días
ReplaceSchema画面のSQL表示で先頭/末尾に余分な空白が入る
Posiblemente ocupada Un pull request vinculado a esta issue está abierto o ya se fusionó. Abierto
- ¿Algo no está bien?
bug javascript

Dificultad 1/5 Menos de una hora Aptitud para principiantes 95/100

dbflute/dbflute-intro#690 · Abierto el 18/10/2026

Los mantenedores suelen responder en 1 día

Más issues de Java

IAM Policy Non-Compliance Detected

¿Algo no está bien?

Evaluación

Línea de trabajo

Descripción

Compliance Audit Report (2026-10-05 09:21:28 UTC)

Permissions for user [email protected] differ. In GCP: [{'role': 'projects/apache-beam-testing/roles/beam_infra_manager'}, {'role': 'roles/serviceusage.apiKeysViewer'}, {'role': 'roles/viewer'}] In ../iam/users.yml: [{'role': 'projects/apache-beam-testing/roles/beam_infra_manager'}]

Permissions for user [email protected] differ. In GCP: [{'role': 'roles/container.admin'}, {'role': 'roles/editor'}, {'role': 'roles/viewer'}] In ../iam/users.yml: [{'role': 'roles/container.admin'}, {'role': 'roles/editor'}]

History

Compliance Audit Report (2026-09-28 09:19:00 UTC)

Permissions for user [email protected] differ. In GCP: [{'role': 'projects/apache-beam-testing/roles/beam_infra_manager'}, {'role': 'roles/serviceusage.apiKeysViewer'}, {'role': 'roles/viewer'}] In ../iam/users.yml: [{'role': 'projects/apache-beam-testing/roles/beam_infra_manager'}]

Permissions for user [email protected] differ. In GCP: [{'role': 'roles/container.admin'}, {'role': 'roles/editor'}, {'role': 'roles/viewer'}] In ../iam/users.yml: [{'role': 'roles/container.admin'}, {'role': 'roles/editor'}]

Compliance Audit Report (2026-09-21 09:15:42 UTC)

Permissions for user [email protected] differ. In GCP: [{'role': 'projects/apache-beam-testing/roles/beam_infra_manager'}, {'role': 'roles/serviceusage.apiKeysViewer'}, {'role': 'roles/viewer'}] In ../iam/users.yml: [{'role': 'projects/apache-beam-testing/roles/beam_infra_manager'}]

Permissions for user [email protected] differ. In GCP: [{'role': 'roles/container.admin'}, {'role': 'roles/editor'}, {'role': 'roles/viewer'}] In ../iam/users.yml: [{'role': 'roles/container.admin'}, {'role': 'roles/editor'}]

Compliance Audit Report (2026-09-14 09:15:25 UTC)

Permissions for user [email protected] differ. In GCP: [{'role': 'projects/apache-beam-testing/roles/beam_infra_manager'}, {'role': 'roles/serviceusage.apiKeysViewer'}, {'role': 'roles/viewer'}] In ../iam/users.yml: [{'role': 'projects/apache-beam-testing/roles/beam_infra_manager'}]

Permissions for user [email protected] differ. In GCP: [{'role': 'roles/container.admin'}, {'role': 'roles/editor'}, {'role': 'roles/viewer'}] In ../iam/users.yml: [{'role': 'roles/container.admin'}, {'role': 'roles/editor'}]

Compliance Audit Report (2026-09-07 09:15:43 UTC)

Permissions for user [email protected] differ. In GCP: [{'role': 'projects/apache-beam-testing/roles/beam_infra_manager'}, {'role': 'roles/serviceusage.apiKeysViewer'}, {'role': 'roles/viewer'}] In ../iam/users.yml: [{'role': 'projects/apache-beam-testing/roles/beam_infra_manager'}]

Permissions for user [email protected] differ. In GCP: [{'role': 'roles/container.admin'}, {'role': 'roles/editor'}, {'role': 'roles/viewer'}] In ../iam/users.yml: [{'role': 'roles/container.admin'}, {'role': 'roles/editor'}]

Compliance Audit Report (2026-08-31 09:16:03 UTC)

Permissions for user [email protected] differ. In GCP: [{'role': 'projects/apache-beam-testing/roles/beam_infra_manager'}, {'role': 'roles/serviceusage.apiKeysViewer'}, {'role': 'roles/viewer'}] In ../iam/users.yml: [{'role': 'projects/apache-beam-testing/roles/beam_infra_manager'}]

Permissions for user [email protected] differ. In GCP: [{'role': 'roles/container.admin'}, {'role': 'roles/editor'}, {'role': 'roles/viewer'}] In ../iam/users.yml: [{'role': 'roles/container.admin'}, {'role': 'roles/editor'}]

Preparar el entorno

Primeros pasos

Más de apache/beam

¿Algo no está bien?

¿Algo no está bien?

¿Algo no está bien?

¿Algo no está bien?

¿Algo no está bien?

Issues similares

¿Algo no está bien?

¿Algo no está bien?

¿Algo no está bien?

¿Algo no está bien?

¿Algo no está bien?

Recibe los nuevos issues en tu correo

Permissions for user [email protected] differ.
In GCP: [{'role': 'projects/apache-beam-testing/roles/beam_infra_manager'}, {'role': 'roles/serviceusage.apiKeysViewer'}, {'role': 'roles/viewer'}]
In ../iam/users.yml: [{'role': 'projects/apache-beam-testing/roles/beam_infra_manager'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/container.admin'}, {'role': 'roles/editor'}, {'role': 'roles/viewer'}]
In ../iam/users.yml: [{'role': 'roles/container.admin'}, {'role': 'roles/editor'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'projects/apache-beam-testing/roles/beam_infra_manager'}, {'role': 'roles/serviceusage.apiKeysViewer'}, {'role': 'roles/viewer'}]
In ../iam/users.yml: [{'role': 'projects/apache-beam-testing/roles/beam_infra_manager'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/container.admin'}, {'role': 'roles/editor'}, {'role': 'roles/viewer'}]
In ../iam/users.yml: [{'role': 'roles/container.admin'}, {'role': 'roles/editor'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'projects/apache-beam-testing/roles/beam_infra_manager'}, {'role': 'roles/serviceusage.apiKeysViewer'}, {'role': 'roles/viewer'}]
In ../iam/users.yml: [{'role': 'projects/apache-beam-testing/roles/beam_infra_manager'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/container.admin'}, {'role': 'roles/editor'}, {'role': 'roles/viewer'}]
In ../iam/users.yml: [{'role': 'roles/container.admin'}, {'role': 'roles/editor'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'projects/apache-beam-testing/roles/beam_infra_manager'}, {'role': 'roles/serviceusage.apiKeysViewer'}, {'role': 'roles/viewer'}]
In ../iam/users.yml: [{'role': 'projects/apache-beam-testing/roles/beam_infra_manager'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/container.admin'}, {'role': 'roles/editor'}, {'role': 'roles/viewer'}]
In ../iam/users.yml: [{'role': 'roles/container.admin'}, {'role': 'roles/editor'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'projects/apache-beam-testing/roles/beam_infra_manager'}, {'role': 'roles/serviceusage.apiKeysViewer'}, {'role': 'roles/viewer'}]
In ../iam/users.yml: [{'role': 'projects/apache-beam-testing/roles/beam_infra_manager'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/container.admin'}, {'role': 'roles/editor'}, {'role': 'roles/viewer'}]
In ../iam/users.yml: [{'role': 'roles/container.admin'}, {'role': 'roles/editor'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'projects/apache-beam-testing/roles/beam_infra_manager'}, {'role': 'roles/serviceusage.apiKeysViewer'}, {'role': 'roles/viewer'}]
In ../iam/users.yml: [{'role': 'projects/apache-beam-testing/roles/beam_infra_manager'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/container.admin'}, {'role': 'roles/editor'}, {'role': 'roles/viewer'}]
In ../iam/users.yml: [{'role': 'roles/container.admin'}, {'role': 'roles/editor'}]