IAM Policy Non-Compliance Detected

オープン

#39,869 2026年8月24日に作成コメント 0 件リアクション 0 件担当者 0 名 GitHub で見る

メンテナーはふだん 1 日以内に返信

まだ誰も着手していません。

評価

難易度: 4/5
見積もり時間: 3〜5日
初心者へのやさしさ: 35/100

issue の種類: バグ
明瞭さ: 説明が足りない
活発さ: 活発
技術スタック: gcp
領域: authorization, cloud, security

調査の方向性

まず ../iam/users.yml を読み、そのロール一覧を監査レポートに示された GCP 権限と比較します。どの差異が意図的なものか、またソースファイルと GCP ポリシーのどちらを変更すべきかを明確にします。プロジェクトが不正なアクセスを導入せずに準拠していれば完了です。

索引モデルが issue の本文から書いたものです。

説明

Compliance Audit Report (2026-10-05 09:21:28 UTC)

IAM policy for project apache-beam-testing is not compliant with the defined policies on ../iam/users.yml

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/artifactregistry.admin'}, {'role': 'roles/bigquery.admin'}, {'role': 'roles/cloudaicompanion.codeToolsAdmin'}, {'role': 'roles/container.admin'}, {'role': 'roles/editor'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/secretmanager.admin'}, {'role': 'roles/storage.objectAdmin'}, {'role': 'roles/storage.objectCreator'}]
In ../iam/users.yml: [{'role': 'roles/artifactregistry.admin'}, {'role': 'roles/bigquery.admin'}, {'role': 'roles/container.admin'}, {'role': 'roles/editor'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/secretmanager.admin'}, {'role': 'roles/storage.objectAdmin'}, {'role': 'roles/storage.objectCreator'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/cloudsql.instanceUser'}, {'role': 'roles/dataflow.admin'}, {'role': 'roles/iam.serviceAccountAdmin'}, {'role': 'roles/storage.admin'}, {'role': 'roles/viewer'}]
In ../iam/users.yml: [{'role': 'roles/cloudsql.instanceUser'}, {'role': 'roles/dataflow.admin'}, {'role': 'roles/iam.serviceAccountAdmin'}, {'role': 'roles/owner'}, {'role': 'roles/storage.admin'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/aiplatform.user'}, {'role': 'roles/alloydb.editor'}, {'role': 'roles/artifactregistry.createOnPushWriter'}, {'role': 'roles/artifactregistry.reader'}, {'role': 'roles/artifactregistry.repoAdmin'}, {'role': 'roles/artifactregistry.writer'}, {'role': 'roles/automlrecommendations.editor'}, {'role': 'roles/autoscaling.metricsWriter'}, {'role': 'roles/biglake.editor'}, {'role': 'roles/bigquery.dataEditor'}, {'role': 'roles/bigquery.user'}, {'role': 'roles/bigtable.admin'}, {'role': 'roles/cloudfunctions.invoker'}, {'role': 'roles/cloudkms.admin'}, {'role': 'roles/cloudkms.cryptoKeyEncrypterDecrypter'}, {'role': 'roles/cloudkms.orgServiceAgent'}, {'role': 'roles/cloudkms.serviceAgent'}, {'role': 'roles/cloudsql.editor'}, {'role': 'roles/compute.viewer'}, {'role': 'roles/container.serviceAgent'}, {'role': 'roles/datacatalog.editor'}, {'role': 'roles/dataflow.admin'}, {'role': 'roles/dataflow.developer'}, {'role': 'roles/dataproc.editor'}, {'role': 'roles/datastore.admin'}, {'role': 'roles/datastore.editor'}, {'role': 'roles/healthcare.dicomEditor'}, {'role': 'roles/healthcare.dicomStoreAdmin'}, {'role': 'roles/healthcare.fhirResourceEditor'}, {'role': 'roles/healthcare.fhirStoreAdmin'}, {'role': 'roles/healthcare.hl7V2Editor'}, {'role': 'roles/healthcare.hl7V2StoreAdmin'}, {'role': 'roles/iam.roleAdmin'}, {'role': 'roles/iam.serviceAccountTokenCreator'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/logging.logWriter'}, {'role': 'roles/managedkafka.admin'}, {'role': 'roles/managedkafka.client'}, {'role': 'roles/managedkafka.schemaRegistryEditor'}, {'role': 'roles/monitoring.metricWriter'}, {'role': 'roles/monitoring.viewer'}, {'role': 'roles/pubsub.admin'}, {'role': 'roles/resourcemanager.projectIamAdmin'}, {'role': 'roles/secretmanager.admin'}, {'role': 'roles/spanner.databaseAdmin'}, {'role': 'roles/stackdriver.resourceMetadata.writer'}, {'role': 'roles/storage.admin'}]
In ../iam/users.yml: [{'role': 'roles/artifactregistry.createOnPushWriter'}, {'role': 'roles/artifactregistry.reader'}, {'role': 'roles/artifactregistry.writer'}, {'role': 'roles/autoscaling.metricsWriter'}, {'role': 'roles/bigquery.dataEditor'}, {'role': 'roles/bigtable.admin'}, {'role': 'roles/cloudfunctions.invoker'}, {'role': 'roles/compute.viewer'}, {'role': 'roles/container.serviceAgent'}, {'role': 'roles/dataflow.admin'}, {'role': 'roles/dataflow.developer'}, {'role': 'roles/dataproc.editor'}, {'role': 'roles/editor'}, {'role': 'roles/healthcare.fhirResourceEditor'}, {'role': 'roles/healthcare.fhirStoreAdmin'}, {'role': 'roles/iam.roleAdmin'}, {'role': 'roles/iam.serviceAccountTokenCreator'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/logging.logWriter'}, {'role': 'roles/managedkafka.admin'}, {'role': 'roles/managedkafka.client'}, {'role': 'roles/managedkafka.schemaRegistryEditor'}, {'role': 'roles/monitoring.metricWriter'}, {'role': 'roles/monitoring.viewer'}, {'role': 'roles/resourcemanager.projectIamAdmin'}, {'role': 'roles/secretmanager.admin'}, {'role': 'roles/spanner.databaseAdmin'}, {'role': 'roles/stackdriver.resourceMetadata.writer'}, {'role': 'roles/storage.admin'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/aiplatform.user'}, {'role': 'roles/artifactregistry.admin'}, {'role': 'roles/artifactregistry.createOnPushWriter'}, {'role': 'roles/bigquery.admin'}, {'role': 'roles/bigquery.dataEditor'}, {'role': 'roles/bigtable.admin'}, {'role': 'roles/bigtable.user'}, {'role': 'roles/cloudkms.admin'}, {'role': 'roles/cloudkms.autokeyAdmin'}, {'role': 'roles/cloudkms.cryptoKeyDecrypter'}, {'role': 'roles/cloudkms.cryptoKeyEncrypter'}, {'role': 'roles/cloudkms.cryptoOperator'}, {'role': 'roles/container.admin'}, {'role': 'roles/dataflow.admin'}, {'role': 'roles/healthcare.fhirResourceEditor'}, {'role': 'roles/healthcare.fhirStoreAdmin'}, {'role': 'roles/iam.serviceAccountTokenCreator'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/pubsub.admin'}, {'role': 'roles/secretmanager.admin'}, {'role': 'roles/spanner.admin'}, {'role': 'roles/storage.admin'}, {'role': 'roles/storage.folderAdmin'}, {'role': 'roles/viewer'}]
In ../iam/users.yml: [{'role': 'roles/aiplatform.user'}, {'role': 'roles/artifactregistry.admin'}, {'role': 'roles/artifactregistry.createOnPushWriter'}, {'role': 'roles/bigquery.admin'}, {'role': 'roles/bigquery.dataEditor'}, {'role': 'roles/bigtable.admin'}, {'role': 'roles/bigtable.user'}, {'role': 'roles/container.admin'}, {'role': 'roles/dataflow.admin'}, {'role': 'roles/healthcare.fhirResourceEditor'}, {'role': 'roles/healthcare.fhirStoreAdmin'}, {'role': 'roles/iam.serviceAccountTokenCreator'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/pubsub.admin'}, {'role': 'roles/secretmanager.admin'}, {'role': 'roles/spanner.admin'}, {'role': 'roles/storage.admin'}, {'role': 'roles/storage.folderAdmin'}, {'role': 'roles/viewer'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/compute.instanceAdmin.v1'}, {'role': 'roles/compute.networkViewer'}, {'role': 'roles/meshconfig.admin'}, {'role': 'roles/saasservicemgmt.admin'}, {'role': 'roles/storage.objectAdmin'}, {'role': 'roles/trafficdirector.client'}]
In ../iam/users.yml: [{'role': 'roles/compute.instanceAdmin.v1'}, {'role': 'roles/compute.networkViewer'}, {'role': 'roles/meshconfig.admin'}, {'role': 'roles/storage.objectAdmin'}, {'role': 'roles/trafficdirector.client'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/artifactregistry.admin'}, {'role': 'roles/artifactregistry.containerRegistryMigrationAdmin'}, {'role': 'roles/artifactregistry.createOnPushRepoAdmin'}, {'role': 'roles/artifactregistry.repoAdmin'}, {'role': 'roles/bigquery.dataOwner'}, {'role': 'roles/container.admin'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/owner'}, {'role': 'roles/resourcemanager.projectIamAdmin'}]
In ../iam/users.yml: [{'role': 'roles/bigquery.dataOwner'}, {'role': 'roles/container.admin'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/owner'}, {'role': 'roles/resourcemanager.projectIamAdmin'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'projects/apache-beam-testing/roles/beam_infra_manager'}, {'role': 'roles/serviceusage.apiKeysViewer'}, {'role': 'roles/viewer'}]
In ../iam/users.yml: [{'role': 'projects/apache-beam-testing/roles/beam_infra_manager'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/container.admin'}, {'role': 'roles/editor'}, {'role': 'roles/viewer'}]
In ../iam/users.yml: [{'role': 'roles/container.admin'}, {'role': 'roles/editor'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/alloydb.admin'}, {'role': 'roles/bigquery.admin'}, {'role': 'roles/compute.networkAdmin'}, {'role': 'roles/dataflow.admin'}, {'role': 'roles/editor'}, {'role': 'roles/pubsub.admin'}, {'role': 'roles/storage.objectAdmin'}]
In ../iam/users.yml: [{'role': 'roles/bigquery.admin'}, {'role': 'roles/dataflow.admin'}, {'role': 'roles/pubsub.admin'}, {'role': 'roles/storage.objectAdmin'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/editor'}, {'role': 'roles/iam.workloadIdentityPoolAdmin'}, {'role': 'roles/secretmanager.admin'}, {'role': 'roles/viewer'}]
In ../iam/users.yml: [{'role': 'roles/editor'}, {'role': 'roles/iam.workloadIdentityPoolAdmin'}, {'role': 'roles/secretmanager.admin'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'organizations/433637338589/roles/GcsBucketOwner'}, {'role': 'roles/alloydb.admin'}, {'role': 'roles/artifactregistry.admin'}, {'role': 'roles/biglake.admin'}, {'role': 'roles/bigquery.admin'}, {'role': 'roles/dataproc.admin'}, {'role': 'roles/editor'}, {'role': 'roles/iam.securityAdmin'}, {'role': 'roles/owner'}, {'role': 'roles/pubsub.admin'}, {'role': 'roles/run.admin'}, {'role': 'roles/storage.admin'}]
In ../iam/users.yml: [{'role': 'organizations/433637338589/roles/GcsBucketOwner'}, {'role': 'roles/alloydb.admin'}, {'role': 'roles/artifactregistry.admin'}, {'role': 'roles/biglake.admin'}, {'role': 'roles/bigquery.admin'}, {'role': 'roles/dataproc.admin'}, {'role': 'roles/editor'}, {'role': 'roles/owner'}, {'role': 'roles/pubsub.admin'}, {'role': 'roles/storage.admin'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/alloydb.admin'}, {'role': 'roles/artifactregistry.admin'}, {'role': 'roles/artifactregistry.writer'}, {'role': 'roles/biglake.admin'}, {'role': 'roles/bigquery.admin'}, {'role': 'roles/compute.admin'}, {'role': 'roles/config.admin'}, {'role': 'roles/config.agent'}, {'role': 'roles/dataflow.worker'}, {'role': 'roles/iam.serviceAccountAdmin'}, {'role': 'roles/iam.serviceAccountTokenCreator'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/logging.logWriter'}, {'role': 'roles/monitoring.metricWriter'}, {'role': 'roles/owner'}, {'role': 'roles/pubsub.admin'}, {'role': 'roles/pubsub.subscriber'}, {'role': 'roles/resourcemanager.projectIamAdmin'}, {'role': 'roles/run.admin'}, {'role': 'roles/storage.admin'}, {'role': 'roles/tpu.admin'}]
In ../iam/users.yml: [{'role': 'roles/alloydb.admin'}, {'role': 'roles/artifactregistry.admin'}, {'role': 'roles/biglake.admin'}, {'role': 'roles/bigquery.admin'}, {'role': 'roles/dataflow.worker'}, {'role': 'roles/iam.serviceAccountAdmin'}, {'role': 'roles/logging.logWriter'}, {'role': 'roles/monitoring.metricWriter'}, {'role': 'roles/pubsub.admin'}, {'role': 'roles/pubsub.subscriber'}, {'role': 'roles/resourcemanager.projectIamAdmin'}, {'role': 'roles/storage.admin'}, {'role': 'roles/tpu.admin'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/cloudaicompanion.codeToolsAdmin'}, {'role': 'roles/container.admin'}, {'role': 'roles/editor'}, {'role': 'roles/iam.serviceAccountAdmin'}, {'role': 'roles/iam.workloadIdentityPoolAdmin'}, {'role': 'roles/secretmanager.secretAccessor'}]
In ../iam/users.yml: [{'role': 'roles/container.admin'}, {'role': 'roles/editor'}, {'role': 'roles/iam.serviceAccountAdmin'}, {'role': 'roles/iam.workloadIdentityPoolAdmin'}, {'role': 'roles/secretmanager.secretAccessor'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/editor'}, {'role': 'roles/viewer'}]
In ../iam/users.yml: [{'role': 'roles/editor'}]

History

Click to expand

Compliance Audit Report (2026-09-28 09:19:00 UTC)

IAM policy for project apache-beam-testing is not compliant with the defined policies on ../iam/users.yml

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/artifactregistry.admin'}, {'role': 'roles/bigquery.admin'}, {'role': 'roles/cloudaicompanion.codeToolsAdmin'}, {'role': 'roles/container.admin'}, {'role': 'roles/editor'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/secretmanager.admin'}, {'role': 'roles/storage.objectAdmin'}, {'role': 'roles/storage.objectCreator'}]
In ../iam/users.yml: [{'role': 'roles/artifactregistry.admin'}, {'role': 'roles/bigquery.admin'}, {'role': 'roles/container.admin'}, {'role': 'roles/editor'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/secretmanager.admin'}, {'role': 'roles/storage.objectAdmin'}, {'role': 'roles/storage.objectCreator'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/cloudsql.instanceUser'}, {'role': 'roles/dataflow.admin'}, {'role': 'roles/iam.serviceAccountAdmin'}, {'role': 'roles/storage.admin'}, {'role': 'roles/viewer'}]
In ../iam/users.yml: [{'role': 'roles/cloudsql.instanceUser'}, {'role': 'roles/dataflow.admin'}, {'role': 'roles/iam.serviceAccountAdmin'}, {'role': 'roles/owner'}, {'role': 'roles/storage.admin'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/aiplatform.user'}, {'role': 'roles/artifactregistry.createOnPushWriter'}, {'role': 'roles/artifactregistry.reader'}, {'role': 'roles/artifactregistry.repoAdmin'}, {'role': 'roles/artifactregistry.writer'}, {'role': 'roles/automlrecommendations.editor'}, {'role': 'roles/autoscaling.metricsWriter'}, {'role': 'roles/biglake.editor'}, {'role': 'roles/bigquery.dataEditor'}, {'role': 'roles/bigquery.user'}, {'role': 'roles/bigtable.admin'}, {'role': 'roles/cloudfunctions.invoker'}, {'role': 'roles/cloudkms.admin'}, {'role': 'roles/cloudkms.cryptoKeyEncrypterDecrypter'}, {'role': 'roles/cloudkms.orgServiceAgent'}, {'role': 'roles/cloudkms.serviceAgent'}, {'role': 'roles/compute.viewer'}, {'role': 'roles/container.serviceAgent'}, {'role': 'roles/dataflow.admin'}, {'role': 'roles/dataflow.developer'}, {'role': 'roles/dataproc.editor'}, {'role': 'roles/datastore.admin'}, {'role': 'roles/datastore.editor'}, {'role': 'roles/healthcare.dicomEditor'}, {'role': 'roles/healthcare.dicomStoreAdmin'}, {'role': 'roles/healthcare.fhirResourceEditor'}, {'role': 'roles/healthcare.fhirStoreAdmin'}, {'role': 'roles/healthcare.hl7V2Editor'}, {'role': 'roles/healthcare.hl7V2StoreAdmin'}, {'role': 'roles/iam.roleAdmin'}, {'role': 'roles/iam.serviceAccountTokenCreator'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/logging.logWriter'}, {'role': 'roles/managedkafka.admin'}, {'role': 'roles/managedkafka.client'}, {'role': 'roles/managedkafka.schemaRegistryEditor'}, {'role': 'roles/monitoring.metricWriter'}, {'role': 'roles/monitoring.viewer'}, {'role': 'roles/pubsub.admin'}, {'role': 'roles/resourcemanager.projectIamAdmin'}, {'role': 'roles/secretmanager.admin'}, {'role': 'roles/spanner.databaseAdmin'}, {'role': 'roles/stackdriver.resourceMetadata.writer'}, {'role': 'roles/storage.admin'}]
In ../iam/users.yml: [{'role': 'roles/artifactregistry.createOnPushWriter'}, {'role': 'roles/artifactregistry.reader'}, {'role': 'roles/artifactregistry.writer'}, {'role': 'roles/autoscaling.metricsWriter'}, {'role': 'roles/bigquery.dataEditor'}, {'role': 'roles/bigtable.admin'}, {'role': 'roles/cloudfunctions.invoker'}, {'role': 'roles/compute.viewer'}, {'role': 'roles/container.serviceAgent'}, {'role': 'roles/dataflow.admin'}, {'role': 'roles/dataflow.developer'}, {'role': 'roles/dataproc.editor'}, {'role': 'roles/editor'}, {'role': 'roles/healthcare.fhirResourceEditor'}, {'role': 'roles/healthcare.fhirStoreAdmin'}, {'role': 'roles/iam.roleAdmin'}, {'role': 'roles/iam.serviceAccountTokenCreator'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/logging.logWriter'}, {'role': 'roles/managedkafka.admin'}, {'role': 'roles/managedkafka.client'}, {'role': 'roles/managedkafka.schemaRegistryEditor'}, {'role': 'roles/monitoring.metricWriter'}, {'role': 'roles/monitoring.viewer'}, {'role': 'roles/resourcemanager.projectIamAdmin'}, {'role': 'roles/secretmanager.admin'}, {'role': 'roles/spanner.databaseAdmin'}, {'role': 'roles/stackdriver.resourceMetadata.writer'}, {'role': 'roles/storage.admin'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/aiplatform.user'}, {'role': 'roles/artifactregistry.admin'}, {'role': 'roles/artifactregistry.createOnPushWriter'}, {'role': 'roles/bigquery.admin'}, {'role': 'roles/bigquery.dataEditor'}, {'role': 'roles/bigtable.admin'}, {'role': 'roles/bigtable.user'}, {'role': 'roles/cloudkms.admin'}, {'role': 'roles/cloudkms.autokeyAdmin'}, {'role': 'roles/cloudkms.cryptoKeyDecrypter'}, {'role': 'roles/cloudkms.cryptoKeyEncrypter'}, {'role': 'roles/cloudkms.cryptoOperator'}, {'role': 'roles/container.admin'}, {'role': 'roles/dataflow.admin'}, {'role': 'roles/healthcare.fhirResourceEditor'}, {'role': 'roles/healthcare.fhirStoreAdmin'}, {'role': 'roles/iam.serviceAccountTokenCreator'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/pubsub.admin'}, {'role': 'roles/secretmanager.admin'}, {'role': 'roles/spanner.admin'}, {'role': 'roles/storage.admin'}, {'role': 'roles/storage.folderAdmin'}, {'role': 'roles/viewer'}]
In ../iam/users.yml: [{'role': 'roles/aiplatform.user'}, {'role': 'roles/artifactregistry.admin'}, {'role': 'roles/artifactregistry.createOnPushWriter'}, {'role': 'roles/bigquery.admin'}, {'role': 'roles/bigquery.dataEditor'}, {'role': 'roles/bigtable.admin'}, {'role': 'roles/bigtable.user'}, {'role': 'roles/container.admin'}, {'role': 'roles/dataflow.admin'}, {'role': 'roles/healthcare.fhirResourceEditor'}, {'role': 'roles/healthcare.fhirStoreAdmin'}, {'role': 'roles/iam.serviceAccountTokenCreator'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/pubsub.admin'}, {'role': 'roles/secretmanager.admin'}, {'role': 'roles/spanner.admin'}, {'role': 'roles/storage.admin'}, {'role': 'roles/storage.folderAdmin'}, {'role': 'roles/viewer'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/compute.instanceAdmin.v1'}, {'role': 'roles/compute.networkViewer'}, {'role': 'roles/meshconfig.admin'}, {'role': 'roles/saasservicemgmt.admin'}, {'role': 'roles/storage.objectAdmin'}, {'role': 'roles/trafficdirector.client'}]
In ../iam/users.yml: [{'role': 'roles/compute.instanceAdmin.v1'}, {'role': 'roles/compute.networkViewer'}, {'role': 'roles/meshconfig.admin'}, {'role': 'roles/storage.objectAdmin'}, {'role': 'roles/trafficdirector.client'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/artifactregistry.admin'}, {'role': 'roles/artifactregistry.containerRegistryMigrationAdmin'}, {'role': 'roles/artifactregistry.createOnPushRepoAdmin'}, {'role': 'roles/artifactregistry.repoAdmin'}, {'role': 'roles/bigquery.dataOwner'}, {'role': 'roles/container.admin'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/owner'}, {'role': 'roles/resourcemanager.projectIamAdmin'}]
In ../iam/users.yml: [{'role': 'roles/bigquery.dataOwner'}, {'role': 'roles/container.admin'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/owner'}, {'role': 'roles/resourcemanager.projectIamAdmin'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'projects/apache-beam-testing/roles/beam_infra_manager'}, {'role': 'roles/serviceusage.apiKeysViewer'}, {'role': 'roles/viewer'}]
In ../iam/users.yml: [{'role': 'projects/apache-beam-testing/roles/beam_infra_manager'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/container.admin'}, {'role': 'roles/editor'}, {'role': 'roles/viewer'}]
In ../iam/users.yml: [{'role': 'roles/container.admin'}, {'role': 'roles/editor'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/alloydb.admin'}, {'role': 'roles/bigquery.admin'}, {'role': 'roles/compute.networkAdmin'}, {'role': 'roles/dataflow.admin'}, {'role': 'roles/editor'}, {'role': 'roles/pubsub.admin'}, {'role': 'roles/storage.objectAdmin'}]
In ../iam/users.yml: [{'role': 'roles/bigquery.admin'}, {'role': 'roles/dataflow.admin'}, {'role': 'roles/pubsub.admin'}, {'role': 'roles/storage.objectAdmin'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/editor'}, {'role': 'roles/iam.workloadIdentityPoolAdmin'}, {'role': 'roles/secretmanager.admin'}, {'role': 'roles/viewer'}]
In ../iam/users.yml: [{'role': 'roles/editor'}, {'role': 'roles/iam.workloadIdentityPoolAdmin'}, {'role': 'roles/secretmanager.admin'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'organizations/433637338589/roles/GcsBucketOwner'}, {'role': 'roles/alloydb.admin'}, {'role': 'roles/artifactregistry.admin'}, {'role': 'roles/biglake.admin'}, {'role': 'roles/bigquery.admin'}, {'role': 'roles/dataproc.admin'}, {'role': 'roles/editor'}, {'role': 'roles/iam.securityAdmin'}, {'role': 'roles/owner'}, {'role': 'roles/pubsub.admin'}, {'role': 'roles/run.admin'}, {'role': 'roles/storage.admin'}]
In ../iam/users.yml: [{'role': 'organizations/433637338589/roles/GcsBucketOwner'}, {'role': 'roles/alloydb.admin'}, {'role': 'roles/artifactregistry.admin'}, {'role': 'roles/biglake.admin'}, {'role': 'roles/bigquery.admin'}, {'role': 'roles/dataproc.admin'}, {'role': 'roles/editor'}, {'role': 'roles/owner'}, {'role': 'roles/pubsub.admin'}, {'role': 'roles/storage.admin'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/alloydb.admin'}, {'role': 'roles/artifactregistry.admin'}, {'role': 'roles/artifactregistry.writer'}, {'role': 'roles/biglake.admin'}, {'role': 'roles/bigquery.admin'}, {'role': 'roles/compute.admin'}, {'role': 'roles/config.admin'}, {'role': 'roles/config.agent'}, {'role': 'roles/dataflow.worker'}, {'role': 'roles/iam.serviceAccountAdmin'}, {'role': 'roles/iam.serviceAccountTokenCreator'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/logging.logWriter'}, {'role': 'roles/monitoring.metricWriter'}, {'role': 'roles/owner'}, {'role': 'roles/pubsub.admin'}, {'role': 'roles/pubsub.subscriber'}, {'role': 'roles/resourcemanager.projectIamAdmin'}, {'role': 'roles/run.admin'}, {'role': 'roles/storage.admin'}, {'role': 'roles/tpu.admin'}]
In ../iam/users.yml: [{'role': 'roles/alloydb.admin'}, {'role': 'roles/artifactregistry.admin'}, {'role': 'roles/biglake.admin'}, {'role': 'roles/bigquery.admin'}, {'role': 'roles/dataflow.worker'}, {'role': 'roles/iam.serviceAccountAdmin'}, {'role': 'roles/logging.logWriter'}, {'role': 'roles/monitoring.metricWriter'}, {'role': 'roles/pubsub.admin'}, {'role': 'roles/pubsub.subscriber'}, {'role': 'roles/resourcemanager.projectIamAdmin'}, {'role': 'roles/storage.admin'}, {'role': 'roles/tpu.admin'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/cloudaicompanion.codeToolsAdmin'}, {'role': 'roles/container.admin'}, {'role': 'roles/editor'}, {'role': 'roles/iam.serviceAccountAdmin'}, {'role': 'roles/iam.workloadIdentityPoolAdmin'}, {'role': 'roles/secretmanager.secretAccessor'}]
In ../iam/users.yml: [{'role': 'roles/container.admin'}, {'role': 'roles/editor'}, {'role': 'roles/iam.serviceAccountAdmin'}, {'role': 'roles/iam.workloadIdentityPoolAdmin'}, {'role': 'roles/secretmanager.secretAccessor'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/editor'}, {'role': 'roles/viewer'}]
In ../iam/users.yml: [{'role': 'roles/editor'}]

Compliance Audit Report (2026-09-21 09:15:42 UTC)

IAM policy for project apache-beam-testing is not compliant with the defined policies on ../iam/users.yml

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/artifactregistry.admin'}, {'role': 'roles/bigquery.admin'}, {'role': 'roles/cloudaicompanion.codeToolsAdmin'}, {'role': 'roles/container.admin'}, {'role': 'roles/editor'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/secretmanager.admin'}, {'role': 'roles/storage.objectAdmin'}, {'role': 'roles/storage.objectCreator'}]
In ../iam/users.yml: [{'role': 'roles/artifactregistry.admin'}, {'role': 'roles/bigquery.admin'}, {'role': 'roles/container.admin'}, {'role': 'roles/editor'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/secretmanager.admin'}, {'role': 'roles/storage.objectAdmin'}, {'role': 'roles/storage.objectCreator'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/cloudsql.instanceUser'}, {'role': 'roles/dataflow.admin'}, {'role': 'roles/iam.serviceAccountAdmin'}, {'role': 'roles/storage.admin'}, {'role': 'roles/viewer'}]
In ../iam/users.yml: [{'role': 'roles/cloudsql.instanceUser'}, {'role': 'roles/dataflow.admin'}, {'role': 'roles/iam.serviceAccountAdmin'}, {'role': 'roles/owner'}, {'role': 'roles/storage.admin'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/artifactregistry.createOnPushWriter'}, {'role': 'roles/artifactregistry.reader'}, {'role': 'roles/artifactregistry.writer'}, {'role': 'roles/autoscaling.metricsWriter'}, {'role': 'roles/bigquery.dataEditor'}, {'role': 'roles/bigtable.admin'}, {'role': 'roles/cloudfunctions.invoker'}, {'role': 'roles/cloudkms.admin'}, {'role': 'roles/cloudkms.cryptoKeyEncrypterDecrypter'}, {'role': 'roles/cloudkms.orgServiceAgent'}, {'role': 'roles/cloudkms.serviceAgent'}, {'role': 'roles/compute.viewer'}, {'role': 'roles/container.serviceAgent'}, {'role': 'roles/dataflow.admin'}, {'role': 'roles/dataflow.developer'}, {'role': 'roles/dataproc.editor'}, {'role': 'roles/editor'}, {'role': 'roles/healthcare.fhirResourceEditor'}, {'role': 'roles/healthcare.fhirStoreAdmin'}, {'role': 'roles/iam.roleAdmin'}, {'role': 'roles/iam.serviceAccountTokenCreator'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/logging.logWriter'}, {'role': 'roles/managedkafka.admin'}, {'role': 'roles/managedkafka.client'}, {'role': 'roles/managedkafka.schemaRegistryEditor'}, {'role': 'roles/monitoring.metricWriter'}, {'role': 'roles/monitoring.viewer'}, {'role': 'roles/resourcemanager.projectIamAdmin'}, {'role': 'roles/secretmanager.admin'}, {'role': 'roles/spanner.databaseAdmin'}, {'role': 'roles/stackdriver.resourceMetadata.writer'}, {'role': 'roles/storage.admin'}]
In ../iam/users.yml: [{'role': 'roles/artifactregistry.createOnPushWriter'}, {'role': 'roles/artifactregistry.reader'}, {'role': 'roles/artifactregistry.writer'}, {'role': 'roles/autoscaling.metricsWriter'}, {'role': 'roles/bigquery.dataEditor'}, {'role': 'roles/bigtable.admin'}, {'role': 'roles/cloudfunctions.invoker'}, {'role': 'roles/compute.viewer'}, {'role': 'roles/container.serviceAgent'}, {'role': 'roles/dataflow.admin'}, {'role': 'roles/dataflow.developer'}, {'role': 'roles/dataproc.editor'}, {'role': 'roles/editor'}, {'role': 'roles/healthcare.fhirResourceEditor'}, {'role': 'roles/healthcare.fhirStoreAdmin'}, {'role': 'roles/iam.roleAdmin'}, {'role': 'roles/iam.serviceAccountTokenCreator'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/logging.logWriter'}, {'role': 'roles/managedkafka.admin'}, {'role': 'roles/managedkafka.client'}, {'role': 'roles/managedkafka.schemaRegistryEditor'}, {'role': 'roles/monitoring.metricWriter'}, {'role': 'roles/monitoring.viewer'}, {'role': 'roles/resourcemanager.projectIamAdmin'}, {'role': 'roles/secretmanager.admin'}, {'role': 'roles/spanner.databaseAdmin'}, {'role': 'roles/stackdriver.resourceMetadata.writer'}, {'role': 'roles/storage.admin'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/aiplatform.user'}, {'role': 'roles/artifactregistry.admin'}, {'role': 'roles/artifactregistry.createOnPushWriter'}, {'role': 'roles/bigquery.admin'}, {'role': 'roles/bigquery.dataEditor'}, {'role': 'roles/bigtable.admin'}, {'role': 'roles/bigtable.user'}, {'role': 'roles/cloudkms.admin'}, {'role': 'roles/cloudkms.autokeyAdmin'}, {'role': 'roles/cloudkms.cryptoKeyDecrypter'}, {'role': 'roles/cloudkms.cryptoKeyEncrypter'}, {'role': 'roles/cloudkms.cryptoOperator'}, {'role': 'roles/container.admin'}, {'role': 'roles/dataflow.admin'}, {'role': 'roles/healthcare.fhirResourceEditor'}, {'role': 'roles/healthcare.fhirStoreAdmin'}, {'role': 'roles/iam.serviceAccountTokenCreator'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/pubsub.admin'}, {'role': 'roles/secretmanager.admin'}, {'role': 'roles/spanner.admin'}, {'role': 'roles/storage.admin'}, {'role': 'roles/storage.folderAdmin'}, {'role': 'roles/viewer'}]
In ../iam/users.yml: [{'role': 'roles/aiplatform.user'}, {'role': 'roles/artifactregistry.admin'}, {'role': 'roles/artifactregistry.createOnPushWriter'}, {'role': 'roles/bigquery.admin'}, {'role': 'roles/bigquery.dataEditor'}, {'role': 'roles/bigtable.admin'}, {'role': 'roles/bigtable.user'}, {'role': 'roles/container.admin'}, {'role': 'roles/dataflow.admin'}, {'role': 'roles/healthcare.fhirResourceEditor'}, {'role': 'roles/healthcare.fhirStoreAdmin'}, {'role': 'roles/iam.serviceAccountTokenCreator'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/pubsub.admin'}, {'role': 'roles/secretmanager.admin'}, {'role': 'roles/spanner.admin'}, {'role': 'roles/storage.admin'}, {'role': 'roles/storage.folderAdmin'}, {'role': 'roles/viewer'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/compute.instanceAdmin.v1'}, {'role': 'roles/compute.networkViewer'}, {'role': 'roles/meshconfig.admin'}, {'role': 'roles/saasservicemgmt.admin'}, {'role': 'roles/storage.objectAdmin'}, {'role': 'roles/trafficdirector.client'}]
In ../iam/users.yml: [{'role': 'roles/compute.instanceAdmin.v1'}, {'role': 'roles/compute.networkViewer'}, {'role': 'roles/meshconfig.admin'}, {'role': 'roles/storage.objectAdmin'}, {'role': 'roles/trafficdirector.client'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/artifactregistry.admin'}, {'role': 'roles/artifactregistry.containerRegistryMigrationAdmin'}, {'role': 'roles/artifactregistry.createOnPushRepoAdmin'}, {'role': 'roles/artifactregistry.repoAdmin'}, {'role': 'roles/bigquery.dataOwner'}, {'role': 'roles/container.admin'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/owner'}, {'role': 'roles/resourcemanager.projectIamAdmin'}]
In ../iam/users.yml: [{'role': 'roles/bigquery.dataOwner'}, {'role': 'roles/container.admin'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/owner'}, {'role': 'roles/resourcemanager.projectIamAdmin'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'projects/apache-beam-testing/roles/beam_infra_manager'}, {'role': 'roles/serviceusage.apiKeysViewer'}, {'role': 'roles/viewer'}]
In ../iam/users.yml: [{'role': 'projects/apache-beam-testing/roles/beam_infra_manager'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/container.admin'}, {'role': 'roles/editor'}, {'role': 'roles/viewer'}]
In ../iam/users.yml: [{'role': 'roles/container.admin'}, {'role': 'roles/editor'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/alloydb.admin'}, {'role': 'roles/bigquery.admin'}, {'role': 'roles/compute.networkAdmin'}, {'role': 'roles/dataflow.admin'}, {'role': 'roles/editor'}, {'role': 'roles/pubsub.admin'}, {'role': 'roles/storage.objectAdmin'}]
In ../iam/users.yml: [{'role': 'roles/bigquery.admin'}, {'role': 'roles/dataflow.admin'}, {'role': 'roles/pubsub.admin'}, {'role': 'roles/storage.objectAdmin'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/editor'}, {'role': 'roles/iam.workloadIdentityPoolAdmin'}, {'role': 'roles/secretmanager.admin'}, {'role': 'roles/viewer'}]
In ../iam/users.yml: [{'role': 'roles/editor'}, {'role': 'roles/iam.workloadIdentityPoolAdmin'}, {'role': 'roles/secretmanager.admin'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'organizations/433637338589/roles/GcsBucketOwner'}, {'role': 'roles/alloydb.admin'}, {'role': 'roles/artifactregistry.admin'}, {'role': 'roles/biglake.admin'}, {'role': 'roles/bigquery.admin'}, {'role': 'roles/dataproc.admin'}, {'role': 'roles/editor'}, {'role': 'roles/iam.securityAdmin'}, {'role': 'roles/owner'}, {'role': 'roles/pubsub.admin'}, {'role': 'roles/run.admin'}, {'role': 'roles/storage.admin'}]
In ../iam/users.yml: [{'role': 'organizations/433637338589/roles/GcsBucketOwner'}, {'role': 'roles/alloydb.admin'}, {'role': 'roles/artifactregistry.admin'}, {'role': 'roles/biglake.admin'}, {'role': 'roles/bigquery.admin'}, {'role': 'roles/dataproc.admin'}, {'role': 'roles/editor'}, {'role': 'roles/owner'}, {'role': 'roles/pubsub.admin'}, {'role': 'roles/storage.admin'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/alloydb.admin'}, {'role': 'roles/artifactregistry.admin'}, {'role': 'roles/artifactregistry.writer'}, {'role': 'roles/biglake.admin'}, {'role': 'roles/bigquery.admin'}, {'role': 'roles/compute.admin'}, {'role': 'roles/config.admin'}, {'role': 'roles/config.agent'}, {'role': 'roles/dataflow.worker'}, {'role': 'roles/iam.serviceAccountAdmin'}, {'role': 'roles/iam.serviceAccountTokenCreator'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/logging.logWriter'}, {'role': 'roles/monitoring.metricWriter'}, {'role': 'roles/owner'}, {'role': 'roles/pubsub.admin'}, {'role': 'roles/pubsub.subscriber'}, {'role': 'roles/resourcemanager.projectIamAdmin'}, {'role': 'roles/run.admin'}, {'role': 'roles/storage.admin'}, {'role': 'roles/tpu.admin'}]
In ../iam/users.yml: [{'role': 'roles/alloydb.admin'}, {'role': 'roles/artifactregistry.admin'}, {'role': 'roles/biglake.admin'}, {'role': 'roles/bigquery.admin'}, {'role': 'roles/dataflow.worker'}, {'role': 'roles/iam.serviceAccountAdmin'}, {'role': 'roles/logging.logWriter'}, {'role': 'roles/monitoring.metricWriter'}, {'role': 'roles/pubsub.admin'}, {'role': 'roles/pubsub.subscriber'}, {'role': 'roles/resourcemanager.projectIamAdmin'}, {'role': 'roles/storage.admin'}, {'role': 'roles/tpu.admin'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/cloudaicompanion.codeToolsAdmin'}, {'role': 'roles/container.admin'}, {'role': 'roles/editor'}, {'role': 'roles/iam.serviceAccountAdmin'}, {'role': 'roles/iam.workloadIdentityPoolAdmin'}, {'role': 'roles/secretmanager.secretAccessor'}]
In ../iam/users.yml: [{'role': 'roles/container.admin'}, {'role': 'roles/editor'}, {'role': 'roles/iam.serviceAccountAdmin'}, {'role': 'roles/iam.workloadIdentityPoolAdmin'}, {'role': 'roles/secretmanager.secretAccessor'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/editor'}, {'role': 'roles/viewer'}]
In ../iam/users.yml: [{'role': 'roles/editor'}]

Compliance Audit Report (2026-09-14 09:15:25 UTC)

IAM policy for project apache-beam-testing is not compliant with the defined policies on ../iam/users.yml

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/artifactregistry.admin'}, {'role': 'roles/bigquery.admin'}, {'role': 'roles/cloudaicompanion.codeToolsAdmin'}, {'role': 'roles/container.admin'}, {'role': 'roles/editor'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/secretmanager.admin'}, {'role': 'roles/storage.objectAdmin'}, {'role': 'roles/storage.objectCreator'}]
In ../iam/users.yml: [{'role': 'roles/artifactregistry.admin'}, {'role': 'roles/bigquery.admin'}, {'role': 'roles/container.admin'}, {'role': 'roles/editor'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/secretmanager.admin'}, {'role': 'roles/storage.objectAdmin'}, {'role': 'roles/storage.objectCreator'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/cloudsql.instanceUser'}, {'role': 'roles/dataflow.admin'}, {'role': 'roles/iam.serviceAccountAdmin'}, {'role': 'roles/storage.admin'}, {'role': 'roles/viewer'}]
In ../iam/users.yml: [{'role': 'roles/cloudsql.instanceUser'}, {'role': 'roles/dataflow.admin'}, {'role': 'roles/iam.serviceAccountAdmin'}, {'role': 'roles/owner'}, {'role': 'roles/storage.admin'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/artifactregistry.createOnPushWriter'}, {'role': 'roles/artifactregistry.reader'}, {'role': 'roles/artifactregistry.writer'}, {'role': 'roles/autoscaling.metricsWriter'}, {'role': 'roles/bigquery.dataEditor'}, {'role': 'roles/bigtable.admin'}, {'role': 'roles/cloudfunctions.invoker'}, {'role': 'roles/cloudkms.admin'}, {'role': 'roles/cloudkms.cryptoKeyEncrypterDecrypter'}, {'role': 'roles/cloudkms.orgServiceAgent'}, {'role': 'roles/cloudkms.serviceAgent'}, {'role': 'roles/compute.viewer'}, {'role': 'roles/container.serviceAgent'}, {'role': 'roles/dataflow.admin'}, {'role': 'roles/dataflow.developer'}, {'role': 'roles/dataproc.editor'}, {'role': 'roles/editor'}, {'role': 'roles/healthcare.fhirResourceEditor'}, {'role': 'roles/healthcare.fhirStoreAdmin'}, {'role': 'roles/iam.roleAdmin'}, {'role': 'roles/iam.serviceAccountTokenCreator'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/logging.logWriter'}, {'role': 'roles/managedkafka.admin'}, {'role': 'roles/managedkafka.client'}, {'role': 'roles/managedkafka.schemaRegistryEditor'}, {'role': 'roles/monitoring.metricWriter'}, {'role': 'roles/monitoring.viewer'}, {'role': 'roles/resourcemanager.projectIamAdmin'}, {'role': 'roles/secretmanager.admin'}, {'role': 'roles/spanner.databaseAdmin'}, {'role': 'roles/stackdriver.resourceMetadata.writer'}, {'role': 'roles/storage.admin'}]
In ../iam/users.yml: [{'role': 'roles/artifactregistry.createOnPushWriter'}, {'role': 'roles/artifactregistry.reader'}, {'role': 'roles/artifactregistry.writer'}, {'role': 'roles/autoscaling.metricsWriter'}, {'role': 'roles/bigquery.dataEditor'}, {'role': 'roles/bigtable.admin'}, {'role': 'roles/cloudfunctions.invoker'}, {'role': 'roles/compute.viewer'}, {'role': 'roles/container.serviceAgent'}, {'role': 'roles/dataflow.admin'}, {'role': 'roles/dataflow.developer'}, {'role': 'roles/dataproc.editor'}, {'role': 'roles/editor'}, {'role': 'roles/healthcare.fhirResourceEditor'}, {'role': 'roles/healthcare.fhirStoreAdmin'}, {'role': 'roles/iam.roleAdmin'}, {'role': 'roles/iam.serviceAccountTokenCreator'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/logging.logWriter'}, {'role': 'roles/managedkafka.admin'}, {'role': 'roles/managedkafka.client'}, {'role': 'roles/managedkafka.schemaRegistryEditor'}, {'role': 'roles/monitoring.metricWriter'}, {'role': 'roles/monitoring.viewer'}, {'role': 'roles/resourcemanager.projectIamAdmin'}, {'role': 'roles/secretmanager.admin'}, {'role': 'roles/spanner.databaseAdmin'}, {'role': 'roles/stackdriver.resourceMetadata.writer'}, {'role': 'roles/storage.admin'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/aiplatform.user'}, {'role': 'roles/artifactregistry.admin'}, {'role': 'roles/artifactregistry.createOnPushWriter'}, {'role': 'roles/bigquery.admin'}, {'role': 'roles/bigquery.dataEditor'}, {'role': 'roles/bigtable.admin'}, {'role': 'roles/bigtable.user'}, {'role': 'roles/cloudkms.admin'}, {'role': 'roles/cloudkms.autokeyAdmin'}, {'role': 'roles/cloudkms.cryptoKeyDecrypter'}, {'role': 'roles/cloudkms.cryptoKeyEncrypter'}, {'role': 'roles/cloudkms.cryptoOperator'}, {'role': 'roles/container.admin'}, {'role': 'roles/dataflow.admin'}, {'role': 'roles/healthcare.fhirResourceEditor'}, {'role': 'roles/healthcare.fhirStoreAdmin'}, {'role': 'roles/iam.serviceAccountTokenCreator'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/pubsub.admin'}, {'role': 'roles/secretmanager.admin'}, {'role': 'roles/spanner.admin'}, {'role': 'roles/storage.admin'}, {'role': 'roles/storage.folderAdmin'}, {'role': 'roles/viewer'}]
In ../iam/users.yml: [{'role': 'roles/aiplatform.user'}, {'role': 'roles/artifactregistry.admin'}, {'role': 'roles/artifactregistry.createOnPushWriter'}, {'role': 'roles/bigquery.admin'}, {'role': 'roles/bigquery.dataEditor'}, {'role': 'roles/bigtable.admin'}, {'role': 'roles/bigtable.user'}, {'role': 'roles/container.admin'}, {'role': 'roles/dataflow.admin'}, {'role': 'roles/healthcare.fhirResourceEditor'}, {'role': 'roles/healthcare.fhirStoreAdmin'}, {'role': 'roles/iam.serviceAccountTokenCreator'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/pubsub.admin'}, {'role': 'roles/secretmanager.admin'}, {'role': 'roles/spanner.admin'}, {'role': 'roles/storage.admin'}, {'role': 'roles/storage.folderAdmin'}, {'role': 'roles/viewer'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/compute.instanceAdmin.v1'}, {'role': 'roles/compute.networkViewer'}, {'role': 'roles/meshconfig.admin'}, {'role': 'roles/saasservicemgmt.admin'}, {'role': 'roles/storage.objectAdmin'}, {'role': 'roles/trafficdirector.client'}]
In ../iam/users.yml: [{'role': 'roles/compute.instanceAdmin.v1'}, {'role': 'roles/compute.networkViewer'}, {'role': 'roles/meshconfig.admin'}, {'role': 'roles/storage.objectAdmin'}, {'role': 'roles/trafficdirector.client'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/artifactregistry.admin'}, {'role': 'roles/artifactregistry.containerRegistryMigrationAdmin'}, {'role': 'roles/artifactregistry.createOnPushRepoAdmin'}, {'role': 'roles/artifactregistry.repoAdmin'}, {'role': 'roles/bigquery.dataOwner'}, {'role': 'roles/container.admin'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/owner'}, {'role': 'roles/resourcemanager.projectIamAdmin'}]
In ../iam/users.yml: [{'role': 'roles/bigquery.dataOwner'}, {'role': 'roles/container.admin'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/owner'}, {'role': 'roles/resourcemanager.projectIamAdmin'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'projects/apache-beam-testing/roles/beam_infra_manager'}, {'role': 'roles/serviceusage.apiKeysViewer'}, {'role': 'roles/viewer'}]
In ../iam/users.yml: [{'role': 'projects/apache-beam-testing/roles/beam_infra_manager'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/container.admin'}, {'role': 'roles/editor'}, {'role': 'roles/viewer'}]
In ../iam/users.yml: [{'role': 'roles/container.admin'}, {'role': 'roles/editor'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/alloydb.admin'}, {'role': 'roles/bigquery.admin'}, {'role': 'roles/compute.networkAdmin'}, {'role': 'roles/dataflow.admin'}, {'role': 'roles/editor'}, {'role': 'roles/pubsub.admin'}, {'role': 'roles/storage.objectAdmin'}]
In ../iam/users.yml: [{'role': 'roles/bigquery.admin'}, {'role': 'roles/dataflow.admin'}, {'role': 'roles/pubsub.admin'}, {'role': 'roles/storage.objectAdmin'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/editor'}, {'role': 'roles/iam.workloadIdentityPoolAdmin'}, {'role': 'roles/secretmanager.admin'}, {'role': 'roles/viewer'}]
In ../iam/users.yml: [{'role': 'roles/editor'}, {'role': 'roles/iam.workloadIdentityPoolAdmin'}, {'role': 'roles/secretmanager.admin'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'organizations/433637338589/roles/GcsBucketOwner'}, {'role': 'roles/alloydb.admin'}, {'role': 'roles/artifactregistry.admin'}, {'role': 'roles/biglake.admin'}, {'role': 'roles/bigquery.admin'}, {'role': 'roles/dataproc.admin'}, {'role': 'roles/editor'}, {'role': 'roles/iam.securityAdmin'}, {'role': 'roles/owner'}, {'role': 'roles/pubsub.admin'}, {'role': 'roles/run.admin'}, {'role': 'roles/storage.admin'}]
In ../iam/users.yml: [{'role': 'organizations/433637338589/roles/GcsBucketOwner'}, {'role': 'roles/alloydb.admin'}, {'role': 'roles/artifactregistry.admin'}, {'role': 'roles/biglake.admin'}, {'role': 'roles/bigquery.admin'}, {'role': 'roles/dataproc.admin'}, {'role': 'roles/editor'}, {'role': 'roles/owner'}, {'role': 'roles/pubsub.admin'}, {'role': 'roles/storage.admin'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/alloydb.admin'}, {'role': 'roles/artifactregistry.admin'}, {'role': 'roles/artifactregistry.writer'}, {'role': 'roles/biglake.admin'}, {'role': 'roles/bigquery.admin'}, {'role': 'roles/compute.admin'}, {'role': 'roles/config.admin'}, {'role': 'roles/config.agent'}, {'role': 'roles/dataflow.worker'}, {'role': 'roles/iam.serviceAccountAdmin'}, {'role': 'roles/iam.serviceAccountTokenCreator'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/logging.logWriter'}, {'role': 'roles/monitoring.metricWriter'}, {'role': 'roles/owner'}, {'role': 'roles/pubsub.admin'}, {'role': 'roles/pubsub.subscriber'}, {'role': 'roles/resourcemanager.projectIamAdmin'}, {'role': 'roles/run.admin'}, {'role': 'roles/storage.admin'}, {'role': 'roles/tpu.admin'}]
In ../iam/users.yml: [{'role': 'roles/alloydb.admin'}, {'role': 'roles/artifactregistry.admin'}, {'role': 'roles/biglake.admin'}, {'role': 'roles/bigquery.admin'}, {'role': 'roles/dataflow.worker'}, {'role': 'roles/iam.serviceAccountAdmin'}, {'role': 'roles/logging.logWriter'}, {'role': 'roles/monitoring.metricWriter'}, {'role': 'roles/pubsub.admin'}, {'role': 'roles/pubsub.subscriber'}, {'role': 'roles/resourcemanager.projectIamAdmin'}, {'role': 'roles/storage.admin'}, {'role': 'roles/tpu.admin'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/cloudaicompanion.codeToolsAdmin'}, {'role': 'roles/container.admin'}, {'role': 'roles/editor'}, {'role': 'roles/iam.serviceAccountAdmin'}, {'role': 'roles/iam.workloadIdentityPoolAdmin'}, {'role': 'roles/secretmanager.secretAccessor'}]
In ../iam/users.yml: [{'role': 'roles/container.admin'}, {'role': 'roles/editor'}, {'role': 'roles/iam.serviceAccountAdmin'}, {'role': 'roles/iam.workloadIdentityPoolAdmin'}, {'role': 'roles/secretmanager.secretAccessor'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/editor'}, {'role': 'roles/viewer'}]
In ../iam/users.yml: [{'role': 'roles/editor'}]

Compliance Audit Report (2026-09-07 09:15:43 UTC)

IAM policy for project apache-beam-testing is not compliant with the defined policies on ../iam/users.yml

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/artifactregistry.admin'}, {'role': 'roles/bigquery.admin'}, {'role': 'roles/cloudaicompanion.codeToolsAdmin'}, {'role': 'roles/container.admin'}, {'role': 'roles/editor'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/secretmanager.admin'}, {'role': 'roles/storage.objectAdmin'}, {'role': 'roles/storage.objectCreator'}]
In ../iam/users.yml: [{'role': 'roles/artifactregistry.admin'}, {'role': 'roles/bigquery.admin'}, {'role': 'roles/container.admin'}, {'role': 'roles/editor'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/secretmanager.admin'}, {'role': 'roles/storage.objectAdmin'}, {'role': 'roles/storage.objectCreator'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/cloudsql.instanceUser'}, {'role': 'roles/dataflow.admin'}, {'role': 'roles/iam.serviceAccountAdmin'}, {'role': 'roles/storage.admin'}, {'role': 'roles/viewer'}]
In ../iam/users.yml: [{'role': 'roles/cloudsql.instanceUser'}, {'role': 'roles/dataflow.admin'}, {'role': 'roles/iam.serviceAccountAdmin'}, {'role': 'roles/owner'}, {'role': 'roles/storage.admin'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/artifactregistry.createOnPushWriter'}, {'role': 'roles/artifactregistry.reader'}, {'role': 'roles/artifactregistry.writer'}, {'role': 'roles/autoscaling.metricsWriter'}, {'role': 'roles/bigquery.dataEditor'}, {'role': 'roles/bigtable.admin'}, {'role': 'roles/cloudfunctions.invoker'}, {'role': 'roles/cloudkms.admin'}, {'role': 'roles/cloudkms.cryptoKeyEncrypterDecrypter'}, {'role': 'roles/cloudkms.orgServiceAgent'}, {'role': 'roles/cloudkms.serviceAgent'}, {'role': 'roles/compute.viewer'}, {'role': 'roles/container.serviceAgent'}, {'role': 'roles/dataflow.admin'}, {'role': 'roles/dataflow.developer'}, {'role': 'roles/dataproc.editor'}, {'role': 'roles/editor'}, {'role': 'roles/healthcare.fhirResourceEditor'}, {'role': 'roles/healthcare.fhirStoreAdmin'}, {'role': 'roles/iam.roleAdmin'}, {'role': 'roles/iam.serviceAccountTokenCreator'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/logging.logWriter'}, {'role': 'roles/managedkafka.admin'}, {'role': 'roles/managedkafka.client'}, {'role': 'roles/managedkafka.schemaRegistryEditor'}, {'role': 'roles/monitoring.metricWriter'}, {'role': 'roles/monitoring.viewer'}, {'role': 'roles/resourcemanager.projectIamAdmin'}, {'role': 'roles/secretmanager.admin'}, {'role': 'roles/spanner.databaseAdmin'}, {'role': 'roles/stackdriver.resourceMetadata.writer'}, {'role': 'roles/storage.admin'}]
In ../iam/users.yml: [{'role': 'roles/artifactregistry.createOnPushWriter'}, {'role': 'roles/artifactregistry.reader'}, {'role': 'roles/artifactregistry.writer'}, {'role': 'roles/autoscaling.metricsWriter'}, {'role': 'roles/bigquery.dataEditor'}, {'role': 'roles/bigtable.admin'}, {'role': 'roles/cloudfunctions.invoker'}, {'role': 'roles/compute.viewer'}, {'role': 'roles/container.serviceAgent'}, {'role': 'roles/dataflow.admin'}, {'role': 'roles/dataflow.developer'}, {'role': 'roles/dataproc.editor'}, {'role': 'roles/editor'}, {'role': 'roles/healthcare.fhirResourceEditor'}, {'role': 'roles/healthcare.fhirStoreAdmin'}, {'role': 'roles/iam.roleAdmin'}, {'role': 'roles/iam.serviceAccountTokenCreator'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/logging.logWriter'}, {'role': 'roles/managedkafka.admin'}, {'role': 'roles/managedkafka.client'}, {'role': 'roles/managedkafka.schemaRegistryEditor'}, {'role': 'roles/monitoring.metricWriter'}, {'role': 'roles/monitoring.viewer'}, {'role': 'roles/resourcemanager.projectIamAdmin'}, {'role': 'roles/secretmanager.admin'}, {'role': 'roles/spanner.databaseAdmin'}, {'role': 'roles/stackdriver.resourceMetadata.writer'}, {'role': 'roles/storage.admin'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/aiplatform.user'}, {'role': 'roles/artifactregistry.admin'}, {'role': 'roles/artifactregistry.createOnPushWriter'}, {'role': 'roles/bigquery.admin'}, {'role': 'roles/bigquery.dataEditor'}, {'role': 'roles/bigtable.admin'}, {'role': 'roles/bigtable.user'}, {'role': 'roles/cloudkms.admin'}, {'role': 'roles/cloudkms.autokeyAdmin'}, {'role': 'roles/cloudkms.cryptoKeyDecrypter'}, {'role': 'roles/cloudkms.cryptoKeyEncrypter'}, {'role': 'roles/cloudkms.cryptoOperator'}, {'role': 'roles/container.admin'}, {'role': 'roles/dataflow.admin'}, {'role': 'roles/healthcare.fhirResourceEditor'}, {'role': 'roles/healthcare.fhirStoreAdmin'}, {'role': 'roles/iam.serviceAccountTokenCreator'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/pubsub.admin'}, {'role': 'roles/secretmanager.admin'}, {'role': 'roles/spanner.admin'}, {'role': 'roles/storage.admin'}, {'role': 'roles/storage.folderAdmin'}, {'role': 'roles/viewer'}]
In ../iam/users.yml: [{'role': 'roles/aiplatform.user'}, {'role': 'roles/artifactregistry.admin'}, {'role': 'roles/artifactregistry.createOnPushWriter'}, {'role': 'roles/bigquery.admin'}, {'role': 'roles/bigquery.dataEditor'}, {'role': 'roles/bigtable.admin'}, {'role': 'roles/bigtable.user'}, {'role': 'roles/container.admin'}, {'role': 'roles/dataflow.admin'}, {'role': 'roles/healthcare.fhirResourceEditor'}, {'role': 'roles/healthcare.fhirStoreAdmin'}, {'role': 'roles/iam.serviceAccountTokenCreator'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/pubsub.admin'}, {'role': 'roles/secretmanager.admin'}, {'role': 'roles/spanner.admin'}, {'role': 'roles/storage.admin'}, {'role': 'roles/storage.folderAdmin'}, {'role': 'roles/viewer'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/compute.instanceAdmin.v1'}, {'role': 'roles/compute.networkViewer'}, {'role': 'roles/meshconfig.admin'}, {'role': 'roles/saasservicemgmt.admin'}, {'role': 'roles/storage.objectAdmin'}, {'role': 'roles/trafficdirector.client'}]
In ../iam/users.yml: [{'role': 'roles/compute.instanceAdmin.v1'}, {'role': 'roles/compute.networkViewer'}, {'role': 'roles/meshconfig.admin'}, {'role': 'roles/storage.objectAdmin'}, {'role': 'roles/trafficdirector.client'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/artifactregistry.admin'}, {'role': 'roles/artifactregistry.containerRegistryMigrationAdmin'}, {'role': 'roles/artifactregistry.createOnPushRepoAdmin'}, {'role': 'roles/artifactregistry.repoAdmin'}, {'role': 'roles/bigquery.dataOwner'}, {'role': 'roles/container.admin'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/owner'}, {'role': 'roles/resourcemanager.projectIamAdmin'}]
In ../iam/users.yml: [{'role': 'roles/bigquery.dataOwner'}, {'role': 'roles/container.admin'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/owner'}, {'role': 'roles/resourcemanager.projectIamAdmin'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'projects/apache-beam-testing/roles/beam_infra_manager'}, {'role': 'roles/serviceusage.apiKeysViewer'}, {'role': 'roles/viewer'}]
In ../iam/users.yml: [{'role': 'projects/apache-beam-testing/roles/beam_infra_manager'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/container.admin'}, {'role': 'roles/editor'}, {'role': 'roles/viewer'}]
In ../iam/users.yml: [{'role': 'roles/container.admin'}, {'role': 'roles/editor'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/alloydb.admin'}, {'role': 'roles/bigquery.admin'}, {'role': 'roles/compute.networkAdmin'}, {'role': 'roles/dataflow.admin'}, {'role': 'roles/editor'}, {'role': 'roles/pubsub.admin'}, {'role': 'roles/storage.objectAdmin'}]
In ../iam/users.yml: [{'role': 'roles/bigquery.admin'}, {'role': 'roles/dataflow.admin'}, {'role': 'roles/pubsub.admin'}, {'role': 'roles/storage.objectAdmin'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/editor'}, {'role': 'roles/iam.workloadIdentityPoolAdmin'}, {'role': 'roles/secretmanager.admin'}, {'role': 'roles/viewer'}]
In ../iam/users.yml: [{'role': 'roles/editor'}, {'role': 'roles/iam.workloadIdentityPoolAdmin'}, {'role': 'roles/secretmanager.admin'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'organizations/433637338589/roles/GcsBucketOwner'}, {'role': 'roles/alloydb.admin'}, {'role': 'roles/artifactregistry.admin'}, {'role': 'roles/biglake.admin'}, {'role': 'roles/bigquery.admin'}, {'role': 'roles/dataproc.admin'}, {'role': 'roles/editor'}, {'role': 'roles/iam.securityAdmin'}, {'role': 'roles/owner'}, {'role': 'roles/pubsub.admin'}, {'role': 'roles/run.admin'}, {'role': 'roles/storage.admin'}]
In ../iam/users.yml: [{'role': 'organizations/433637338589/roles/GcsBucketOwner'}, {'role': 'roles/alloydb.admin'}, {'role': 'roles/artifactregistry.admin'}, {'role': 'roles/biglake.admin'}, {'role': 'roles/bigquery.admin'}, {'role': 'roles/dataproc.admin'}, {'role': 'roles/editor'}, {'role': 'roles/owner'}, {'role': 'roles/pubsub.admin'}, {'role': 'roles/storage.admin'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/alloydb.admin'}, {'role': 'roles/artifactregistry.admin'}, {'role': 'roles/artifactregistry.writer'}, {'role': 'roles/biglake.admin'}, {'role': 'roles/bigquery.admin'}, {'role': 'roles/compute.admin'}, {'role': 'roles/config.admin'}, {'role': 'roles/config.agent'}, {'role': 'roles/dataflow.worker'}, {'role': 'roles/iam.serviceAccountAdmin'}, {'role': 'roles/iam.serviceAccountTokenCreator'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/logging.logWriter'}, {'role': 'roles/monitoring.metricWriter'}, {'role': 'roles/owner'}, {'role': 'roles/pubsub.admin'}, {'role': 'roles/pubsub.subscriber'}, {'role': 'roles/resourcemanager.projectIamAdmin'}, {'role': 'roles/run.admin'}, {'role': 'roles/storage.admin'}, {'role': 'roles/tpu.admin'}]
In ../iam/users.yml: [{'role': 'roles/alloydb.admin'}, {'role': 'roles/artifactregistry.admin'}, {'role': 'roles/biglake.admin'}, {'role': 'roles/bigquery.admin'}, {'role': 'roles/dataflow.worker'}, {'role': 'roles/iam.serviceAccountAdmin'}, {'role': 'roles/logging.logWriter'}, {'role': 'roles/monitoring.metricWriter'}, {'role': 'roles/pubsub.admin'}, {'role': 'roles/pubsub.subscriber'}, {'role': 'roles/resourcemanager.projectIamAdmin'}, {'role': 'roles/storage.admin'}, {'role': 'roles/tpu.admin'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/cloudaicompanion.codeToolsAdmin'}, {'role': 'roles/container.admin'}, {'role': 'roles/editor'}, {'role': 'roles/iam.serviceAccountAdmin'}, {'role': 'roles/iam.workloadIdentityPoolAdmin'}, {'role': 'roles/secretmanager.secretAccessor'}]
In ../iam/users.yml: [{'role': 'roles/container.admin'}, {'role': 'roles/editor'}, {'role': 'roles/iam.serviceAccountAdmin'}, {'role': 'roles/iam.workloadIdentityPoolAdmin'}, {'role': 'roles/secretmanager.secretAccessor'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/editor'}, {'role': 'roles/viewer'}]
In ../iam/users.yml: [{'role': 'roles/editor'}]

Compliance Audit Report (2026-08-31 09:16:03 UTC)

IAM policy for project apache-beam-testing is not compliant with the defined policies on ../iam/users.yml

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/artifactregistry.admin'}, {'role': 'roles/bigquery.admin'}, {'role': 'roles/cloudaicompanion.codeToolsAdmin'}, {'role': 'roles/container.admin'}, {'role': 'roles/editor'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/secretmanager.admin'}, {'role': 'roles/storage.objectAdmin'}, {'role': 'roles/storage.objectCreator'}]
In ../iam/users.yml: [{'role': 'roles/artifactregistry.admin'}, {'role': 'roles/bigquery.admin'}, {'role': 'roles/container.admin'}, {'role': 'roles/editor'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/secretmanager.admin'}, {'role': 'roles/storage.objectAdmin'}, {'role': 'roles/storage.objectCreator'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/cloudsql.instanceUser'}, {'role': 'roles/dataflow.admin'}, {'role': 'roles/iam.serviceAccountAdmin'}, {'role': 'roles/storage.admin'}, {'role': 'roles/viewer'}]
In ../iam/users.yml: [{'role': 'roles/cloudsql.instanceUser'}, {'role': 'roles/dataflow.admin'}, {'role': 'roles/iam.serviceAccountAdmin'}, {'role': 'roles/owner'}, {'role': 'roles/storage.admin'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/artifactregistry.createOnPushWriter'}, {'role': 'roles/artifactregistry.reader'}, {'role': 'roles/artifactregistry.writer'}, {'role': 'roles/autoscaling.metricsWriter'}, {'role': 'roles/bigquery.dataEditor'}, {'role': 'roles/bigtable.admin'}, {'role': 'roles/cloudfunctions.invoker'}, {'role': 'roles/cloudkms.admin'}, {'role': 'roles/cloudkms.cryptoKeyEncrypterDecrypter'}, {'role': 'roles/cloudkms.orgServiceAgent'}, {'role': 'roles/cloudkms.serviceAgent'}, {'role': 'roles/compute.viewer'}, {'role': 'roles/container.serviceAgent'}, {'role': 'roles/dataflow.admin'}, {'role': 'roles/dataflow.developer'}, {'role': 'roles/dataproc.editor'}, {'role': 'roles/editor'}, {'role': 'roles/healthcare.fhirResourceEditor'}, {'role': 'roles/healthcare.fhirStoreAdmin'}, {'role': 'roles/iam.roleAdmin'}, {'role': 'roles/iam.serviceAccountTokenCreator'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/logging.logWriter'}, {'role': 'roles/managedkafka.admin'}, {'role': 'roles/managedkafka.client'}, {'role': 'roles/managedkafka.schemaRegistryEditor'}, {'role': 'roles/monitoring.metricWriter'}, {'role': 'roles/monitoring.viewer'}, {'role': 'roles/resourcemanager.projectIamAdmin'}, {'role': 'roles/secretmanager.admin'}, {'role': 'roles/spanner.databaseAdmin'}, {'role': 'roles/stackdriver.resourceMetadata.writer'}, {'role': 'roles/storage.admin'}]
In ../iam/users.yml: [{'role': 'roles/artifactregistry.createOnPushWriter'}, {'role': 'roles/artifactregistry.reader'}, {'role': 'roles/artifactregistry.writer'}, {'role': 'roles/autoscaling.metricsWriter'}, {'role': 'roles/bigquery.dataEditor'}, {'role': 'roles/bigtable.admin'}, {'role': 'roles/cloudfunctions.invoker'}, {'role': 'roles/compute.viewer'}, {'role': 'roles/container.serviceAgent'}, {'role': 'roles/dataflow.admin'}, {'role': 'roles/dataflow.developer'}, {'role': 'roles/dataproc.editor'}, {'role': 'roles/editor'}, {'role': 'roles/healthcare.fhirResourceEditor'}, {'role': 'roles/healthcare.fhirStoreAdmin'}, {'role': 'roles/iam.roleAdmin'}, {'role': 'roles/iam.serviceAccountTokenCreator'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/logging.logWriter'}, {'role': 'roles/managedkafka.admin'}, {'role': 'roles/managedkafka.client'}, {'role': 'roles/managedkafka.schemaRegistryEditor'}, {'role': 'roles/monitoring.metricWriter'}, {'role': 'roles/monitoring.viewer'}, {'role': 'roles/resourcemanager.projectIamAdmin'}, {'role': 'roles/secretmanager.admin'}, {'role': 'roles/spanner.databaseAdmin'}, {'role': 'roles/stackdriver.resourceMetadata.writer'}, {'role': 'roles/storage.admin'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/aiplatform.user'}, {'role': 'roles/artifactregistry.admin'}, {'role': 'roles/artifactregistry.createOnPushWriter'}, {'role': 'roles/bigquery.admin'}, {'role': 'roles/bigquery.dataEditor'}, {'role': 'roles/bigtable.admin'}, {'role': 'roles/bigtable.user'}, {'role': 'roles/cloudkms.admin'}, {'role': 'roles/cloudkms.autokeyAdmin'}, {'role': 'roles/cloudkms.cryptoKeyDecrypter'}, {'role': 'roles/cloudkms.cryptoKeyEncrypter'}, {'role': 'roles/cloudkms.cryptoOperator'}, {'role': 'roles/container.admin'}, {'role': 'roles/dataflow.admin'}, {'role': 'roles/healthcare.fhirResourceEditor'}, {'role': 'roles/healthcare.fhirStoreAdmin'}, {'role': 'roles/iam.serviceAccountTokenCreator'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/pubsub.admin'}, {'role': 'roles/secretmanager.admin'}, {'role': 'roles/spanner.admin'}, {'role': 'roles/storage.admin'}, {'role': 'roles/storage.folderAdmin'}, {'role': 'roles/viewer'}]
In ../iam/users.yml: [{'role': 'roles/aiplatform.user'}, {'role': 'roles/artifactregistry.admin'}, {'role': 'roles/artifactregistry.createOnPushWriter'}, {'role': 'roles/bigquery.admin'}, {'role': 'roles/bigquery.dataEditor'}, {'role': 'roles/bigtable.admin'}, {'role': 'roles/bigtable.user'}, {'role': 'roles/container.admin'}, {'role': 'roles/dataflow.admin'}, {'role': 'roles/healthcare.fhirResourceEditor'}, {'role': 'roles/healthcare.fhirStoreAdmin'}, {'role': 'roles/iam.serviceAccountTokenCreator'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/pubsub.admin'}, {'role': 'roles/secretmanager.admin'}, {'role': 'roles/spanner.admin'}, {'role': 'roles/storage.admin'}, {'role': 'roles/storage.folderAdmin'}, {'role': 'roles/viewer'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/compute.instanceAdmin.v1'}, {'role': 'roles/compute.networkViewer'}, {'role': 'roles/meshconfig.admin'}, {'role': 'roles/saasservicemgmt.admin'}, {'role': 'roles/storage.objectAdmin'}, {'role': 'roles/trafficdirector.client'}]
In ../iam/users.yml: [{'role': 'roles/compute.instanceAdmin.v1'}, {'role': 'roles/compute.networkViewer'}, {'role': 'roles/meshconfig.admin'}, {'role': 'roles/storage.objectAdmin'}, {'role': 'roles/trafficdirector.client'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/artifactregistry.admin'}, {'role': 'roles/artifactregistry.containerRegistryMigrationAdmin'}, {'role': 'roles/artifactregistry.createOnPushRepoAdmin'}, {'role': 'roles/artifactregistry.repoAdmin'}, {'role': 'roles/bigquery.dataOwner'}, {'role': 'roles/container.admin'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/owner'}, {'role': 'roles/resourcemanager.projectIamAdmin'}]
In ../iam/users.yml: [{'role': 'roles/bigquery.dataOwner'}, {'role': 'roles/container.admin'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/owner'}, {'role': 'roles/resourcemanager.projectIamAdmin'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'projects/apache-beam-testing/roles/beam_infra_manager'}, {'role': 'roles/serviceusage.apiKeysViewer'}, {'role': 'roles/viewer'}]
In ../iam/users.yml: [{'role': 'projects/apache-beam-testing/roles/beam_infra_manager'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/container.admin'}, {'role': 'roles/editor'}, {'role': 'roles/viewer'}]
In ../iam/users.yml: [{'role': 'roles/container.admin'}, {'role': 'roles/editor'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'rol

主要言語: Java
スター: 8.7k
フォーク: 4.7k
平均マージ: 2日 7時間
マージ済み PR（30日）: 290

環境構築

Dockerfile・Docker Compose ファイルなし
プルリクエストのテンプレートあり
コントリビューションガイドを読む

はじめの一歩

issue を最後まで読み、次にプロジェクトのコントリビューションガイドを読みます。
着手することを issue にコメントします — 二人が同じ作業をするのを防げます。
リポジトリをフォークし、ブランチを切って変更します。
issue 番号を参照したプルリクエストを送ります。

apache/beam のほかの issue

[Feature Request]: Support Protobuf 7.x in Python SDK
対応中かも @sofiathoren が 3 日前に担当しました。オープン
- 何か問題がありますか？
P2 python

難易度 2/5 1〜3時間初心者へのやさしさ 62/100

apache/beam#40580 · 2026年10月14日に作成

メンテナーはふだん 1 日以内に返信
[Bug]: Row.toString throws for an ITERABLE field that is not backed by a List
対応中かも @PDGGK が 64 日前に担当しました。オープン
- 何か問題がありますか？
java P3

難易度 2/5 1〜3時間初心者へのやさしさ 76/100

apache/beam#39749 · 2026年8月14日に作成

メンテナーはふだん 1 日以内に返信
Upgrade vendored grpc to remove vulnerabilities coming from netty
オープン
- 何か問題がありますか？
難易度 2/5 1〜3時間初心者へのやさしさ 68/100

apache/beam#39624 · リアクション 2 件 · 2026年8月5日に作成

メンテナーはふだん 1 日以内に返信
[Bug]: PubsubIO used in batch incorrect batch cutoff size
対応中かも @1fanwang が 53 日前に担当しました。オープン
- 何か問題がありますか？
bug io P3 pinned pubsub

難易度 2/5 1〜3時間初心者へのやさしさ 78/100

apache/beam#28011 · コメント 4 件 · 2023年8月15日に作成

メンテナーはふだん 1 日以内に返信
Add Gradle instruction to Java quick start guide
オープン
- 何か問題がありますか？
build P3 sub-task

難易度 1/5 1時間未満初心者へのやさしさ 68/100

apache/beam#20256 · 2022年6月4日に作成

メンテナーはふだん 1 日以内に返信

apache/beam の issue をすべて見る

似ている issue

BC remittance upload: a claim MSP refused (S03) is saved with a blank status instead of refused (F)
オープン
- 何か問題がありますか？
type: bug

難易度 2/5 1〜3時間初心者へのやさしさ 88/100

carlos-emr/carlos#4933 · 2026年10月18日に作成

メンテナーはふだん 1 日以内に返信
[LOOTRUN] Health Indicator has Small Range
オープン
- 何か問題がありますか？
難易度 2/5 1〜3時間初心者へのやさしさ 68/100

Vakore/ZappierGames#147 · 2026年10月18日に作成
Post 1.11.2 to SpigotMC
オープン
- 何か問題がありますか？
spigotmc

難易度 1/5 1時間未満初心者へのやさしさ 92/100

Dans-Plugins/Wild-Pets#356 · 2026年10月18日に作成

メンテナーはふだん 1 日以内に返信
Post 1.16.2 to SpigotMC
オープン
- 何か問題がありますか？
spigotmc

難易度 1/5 1時間未満初心者へのやさしさ 85/100

Dans-Plugins/Medieval-Roleplay-Engine#371 · 2026年10月18日に作成

メンテナーはふだん 1 日以内に返信
[BUG] - Server unreachable dialog shows twice
オープン
- 何か問題がありますか？
bug

難易度 2/5 1〜3時間初心者へのやさしさ 84/100

eddyizm/tempus#1220 · コメント 1 件 · 2026年10月18日に作成

メンテナーはふだん 2 日以内に返信

Java の issue をもっと見る

IAM Policy Non-Compliance Detected

何か問題がありますか？

評価

調査の方向性

説明

Compliance Audit Report (2026-10-05 09:21:28 UTC)

Permissions for user [email protected] differ. In GCP: [{'role': 'projects/apache-beam-testing/roles/beam_infra_manager'}, {'role': 'roles/serviceusage.apiKeysViewer'}, {'role': 'roles/viewer'}] In ../iam/users.yml: [{'role': 'projects/apache-beam-testing/roles/beam_infra_manager'}]

Permissions for user [email protected] differ. In GCP: [{'role': 'roles/container.admin'}, {'role': 'roles/editor'}, {'role': 'roles/viewer'}] In ../iam/users.yml: [{'role': 'roles/container.admin'}, {'role': 'roles/editor'}]

History

Compliance Audit Report (2026-09-28 09:19:00 UTC)

Permissions for user [email protected] differ. In GCP: [{'role': 'projects/apache-beam-testing/roles/beam_infra_manager'}, {'role': 'roles/serviceusage.apiKeysViewer'}, {'role': 'roles/viewer'}] In ../iam/users.yml: [{'role': 'projects/apache-beam-testing/roles/beam_infra_manager'}]

Permissions for user [email protected] differ. In GCP: [{'role': 'roles/container.admin'}, {'role': 'roles/editor'}, {'role': 'roles/viewer'}] In ../iam/users.yml: [{'role': 'roles/container.admin'}, {'role': 'roles/editor'}]

Compliance Audit Report (2026-09-21 09:15:42 UTC)

Permissions for user [email protected] differ. In GCP: [{'role': 'projects/apache-beam-testing/roles/beam_infra_manager'}, {'role': 'roles/serviceusage.apiKeysViewer'}, {'role': 'roles/viewer'}] In ../iam/users.yml: [{'role': 'projects/apache-beam-testing/roles/beam_infra_manager'}]

Permissions for user [email protected] differ. In GCP: [{'role': 'roles/container.admin'}, {'role': 'roles/editor'}, {'role': 'roles/viewer'}] In ../iam/users.yml: [{'role': 'roles/container.admin'}, {'role': 'roles/editor'}]

Compliance Audit Report (2026-09-14 09:15:25 UTC)

Permissions for user [email protected] differ. In GCP: [{'role': 'projects/apache-beam-testing/roles/beam_infra_manager'}, {'role': 'roles/serviceusage.apiKeysViewer'}, {'role': 'roles/viewer'}] In ../iam/users.yml: [{'role': 'projects/apache-beam-testing/roles/beam_infra_manager'}]

Permissions for user [email protected] differ. In GCP: [{'role': 'roles/container.admin'}, {'role': 'roles/editor'}, {'role': 'roles/viewer'}] In ../iam/users.yml: [{'role': 'roles/container.admin'}, {'role': 'roles/editor'}]

Compliance Audit Report (2026-09-07 09:15:43 UTC)

Permissions for user [email protected] differ. In GCP: [{'role': 'projects/apache-beam-testing/roles/beam_infra_manager'}, {'role': 'roles/serviceusage.apiKeysViewer'}, {'role': 'roles/viewer'}] In ../iam/users.yml: [{'role': 'projects/apache-beam-testing/roles/beam_infra_manager'}]

Permissions for user [email protected] differ. In GCP: [{'role': 'roles/container.admin'}, {'role': 'roles/editor'}, {'role': 'roles/viewer'}] In ../iam/users.yml: [{'role': 'roles/container.admin'}, {'role': 'roles/editor'}]

Compliance Audit Report (2026-08-31 09:16:03 UTC)

Permissions for user [email protected] differ. In GCP: [{'role': 'projects/apache-beam-testing/roles/beam_infra_manager'}, {'role': 'roles/serviceusage.apiKeysViewer'}, {'role': 'roles/viewer'}] In ../iam/users.yml: [{'role': 'projects/apache-beam-testing/roles/beam_infra_manager'}]

Permissions for user [email protected] differ. In GCP: [{'role': 'roles/container.admin'}, {'role': 'roles/editor'}, {'role': 'roles/viewer'}] In ../iam/users.yml: [{'role': 'roles/container.admin'}, {'role': 'roles/editor'}]

環境構築

はじめの一歩

apache/beam のほかの issue

何か問題がありますか？

何か問題がありますか？

何か問題がありますか？

何か問題がありますか？

何か問題がありますか？

似ている issue

何か問題がありますか？

何か問題がありますか？

何か問題がありますか？

何か問題がありますか？

何か問題がありますか？

新しい issue をメールで受け取る

Permissions for user [email protected] differ.
In GCP: [{'role': 'projects/apache-beam-testing/roles/beam_infra_manager'}, {'role': 'roles/serviceusage.apiKeysViewer'}, {'role': 'roles/viewer'}]
In ../iam/users.yml: [{'role': 'projects/apache-beam-testing/roles/beam_infra_manager'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/container.admin'}, {'role': 'roles/editor'}, {'role': 'roles/viewer'}]
In ../iam/users.yml: [{'role': 'roles/container.admin'}, {'role': 'roles/editor'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'projects/apache-beam-testing/roles/beam_infra_manager'}, {'role': 'roles/serviceusage.apiKeysViewer'}, {'role': 'roles/viewer'}]
In ../iam/users.yml: [{'role': 'projects/apache-beam-testing/roles/beam_infra_manager'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/container.admin'}, {'role': 'roles/editor'}, {'role': 'roles/viewer'}]
In ../iam/users.yml: [{'role': 'roles/container.admin'}, {'role': 'roles/editor'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'projects/apache-beam-testing/roles/beam_infra_manager'}, {'role': 'roles/serviceusage.apiKeysViewer'}, {'role': 'roles/viewer'}]
In ../iam/users.yml: [{'role': 'projects/apache-beam-testing/roles/beam_infra_manager'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/container.admin'}, {'role': 'roles/editor'}, {'role': 'roles/viewer'}]
In ../iam/users.yml: [{'role': 'roles/container.admin'}, {'role': 'roles/editor'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'projects/apache-beam-testing/roles/beam_infra_manager'}, {'role': 'roles/serviceusage.apiKeysViewer'}, {'role': 'roles/viewer'}]
In ../iam/users.yml: [{'role': 'projects/apache-beam-testing/roles/beam_infra_manager'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/container.admin'}, {'role': 'roles/editor'}, {'role': 'roles/viewer'}]
In ../iam/users.yml: [{'role': 'roles/container.admin'}, {'role': 'roles/editor'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'projects/apache-beam-testing/roles/beam_infra_manager'}, {'role': 'roles/serviceusage.apiKeysViewer'}, {'role': 'roles/viewer'}]
In ../iam/users.yml: [{'role': 'projects/apache-beam-testing/roles/beam_infra_manager'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/container.admin'}, {'role': 'roles/editor'}, {'role': 'roles/viewer'}]
In ../iam/users.yml: [{'role': 'roles/container.admin'}, {'role': 'roles/editor'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'projects/apache-beam-testing/roles/beam_infra_manager'}, {'role': 'roles/serviceusage.apiKeysViewer'}, {'role': 'roles/viewer'}]
In ../iam/users.yml: [{'role': 'projects/apache-beam-testing/roles/beam_infra_manager'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/container.admin'}, {'role': 'roles/editor'}, {'role': 'roles/viewer'}]
In ../iam/users.yml: [{'role': 'roles/container.admin'}, {'role': 'roles/editor'}]