[IAC_DRIFT_IAM_USER] Action Required: Unauthorized IAM Users Detected
Đang mở
Maintainer thường phản hồi trong vòng 1 ngày
Chưa có ai nhận issue này.
Đánh giá
- Độ khó
- 5/5
- Thời gian dự kiến
- Hơn một tuần
- Mức phù hợp với người mới
- 20/100
- Loại issue
- Lỗi
- Độ rõ ràng
- Cần làm rõ
- Mức độ hoạt động
- Sôi nổi
- Công nghệ
- gcp
- Lĩnh vực
- authorization, cloud, security
Hướng nghiên cứu
Issue xác định các người dùng chưa được ủy quyền trong các policy GCP IAM của dự án apache-beam-testing, nhưng không nêu tệp, test hoặc điểm vào của code. Trước tiên, hãy xác định nơi định nghĩa compliance audit và policy hiện có, sau đó xác định mỗi danh tính cần được xóa, ủy quyền hay điều tra; công việc được hoàn tất khi drift được báo cáo đã được giải quyết và một audit sạch được xác nhận.
Do mô hình lập chỉ mục viết ra từ nội dung của issue.
Mô tả
Compliance Audit Report (2026-10-05 09:21:32 UTC)
Critical security violations detected in IAM policies for project apache-beam-testing:
- IAC_DRIFT_IAM_USER: Unauthorized user '[email protected]' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user '[email protected]' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user '[email protected]' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user '[email protected]' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user '[email protected]' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user '[email protected]' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user '[email protected]' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user '[email protected]' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user '[email protected]' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user '[email protected]' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user '[email protected]' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user '[email protected]' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user '[email protected]' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user '[email protected]' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user 'ratelimit-actuation-sa@apache-beam-testing.iam.gserviceaccount.com' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user '[email protected]' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user '[email protected]' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user 'tarun-dataflow-custom-sa@apache-beam-testing.iam.gserviceaccount.com' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user '[email protected]' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user '[email protected]' detected in GCP but not found in existing policy.
History
Click to expand
Compliance Audit Report (2026-09-28 09:19:04 UTC)
Critical security violations detected in IAM policies for project apache-beam-testing:
- IAC_DRIFT_IAM_USER: Unauthorized user '[email protected]' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user '[email protected]' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user '[email protected]' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user '[email protected]' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user '[email protected]' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user '[email protected]' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user '[email protected]' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user '[email protected]' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user '[email protected]' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user '[email protected]' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user '[email protected]' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user '[email protected]' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user '[email protected]' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user '[email protected]' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user 'ratelimit-actuation-sa@apache-beam-testing.iam.gserviceaccount.com' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user '[email protected]' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user 'tarun-dataflow-custom-sa@apache-beam-testing.iam.gserviceaccount.com' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user '[email protected]' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user '[email protected]' detected in GCP but not found in existing policy.
Compliance Audit Report (2026-09-21 09:15:45 UTC)
Critical security violations detected in IAM policies for project apache-beam-testing:
- IAC_DRIFT_IAM_USER: Unauthorized user '[email protected]' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user '[email protected]' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user '[email protected]' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user '[email protected]' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user '[email protected]' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user '[email protected]' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user '[email protected]' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user '[email protected]' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user '[email protected]' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user '[email protected]' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user '[email protected]' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user '[email protected]' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user '[email protected]' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user '[email protected]' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user 'ratelimit-actuation-sa@apache-beam-testing.iam.gserviceaccount.com' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user '[email protected]' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user 'tarun-dataflow-custom-sa@apache-beam-testing.iam.gserviceaccount.com' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user '[email protected]' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user '[email protected]' detected in GCP but not found in existing policy.
Compliance Audit Report (2026-09-14 09:15:28 UTC)
Critical security violations detected in IAM policies for project apache-beam-testing:
- IAC_DRIFT_IAM_USER: Unauthorized user '[email protected]' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user '[email protected]' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user '[email protected]' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user '[email protected]' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user '[email protected]' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user '[email protected]' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user '[email protected]' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user '[email protected]' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user '[email protected]' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user '[email protected]' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user '[email protected]' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user '[email protected]' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user '[email protected]' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user 'ratelimit-actuation-sa@apache-beam-testing.iam.gserviceaccount.com' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user '[email protected]' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user 'tarun-dataflow-custom-sa@apache-beam-testing.iam.gserviceaccount.com' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user '[email protected]' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user '[email protected]' detected in GCP but not found in existing policy.
Compliance Audit Report (2026-09-07 09:15:46 UTC)
Critical security violations detected in IAM policies for project apache-beam-testing:
- IAC_DRIFT_IAM_USER: Unauthorized user '[email protected]' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user '[email protected]' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user '[email protected]' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user '[email protected]' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user '[email protected]' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user '[email protected]' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user '[email protected]' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user '[email protected]' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user '[email protected]' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user '[email protected]' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user '[email protected]' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user '[email protected]' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user '[email protected]' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user 'ratelimit-actuation-sa@apache-beam-testing.iam.gserviceaccount.com' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user '[email protected]' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user 'tarun-dataflow-custom-sa@apache-beam-testing.iam.gserviceaccount.com' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user '[email protected]' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user '[email protected]' detected in GCP but not found in existing policy.
Compliance Audit Report (2026-08-31 09:16:06 UTC)
Critical security violations detected in IAM policies for project apache-beam-testing:
- IAC_DRIFT_IAM_USER: Unauthorized user '[email protected]' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user '[email protected]' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user '[email protected]' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user '[email protected]' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user '[email protected]' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user '[email protected]' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user '[email protected]' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user '[email protected]' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user '[email protected]' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user '[email protected]' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user '[email protected]' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user '[email protected]' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user '[email protected]' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user 'ratelimit-actuation-sa@apache-beam-testing.iam.gserviceaccount.com' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user '[email protected]' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user 'tarun-dataflow-custom-sa@apache-beam-testing.iam.gserviceaccount.com' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user '[email protected]' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user '[email protected]' detected in GCP but not found in existing policy.
Compliance Audit Report (2026-08-24 09:18:42 UTC)
Critical security violations detected in IAM policies for project apache-beam-testing:
- IAC_DRIFT_IAM_USER: Unauthorized user '[email protected]' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user '[email protected]' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user '[email protected]' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user '[email protected]' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user '[email protected]' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user '[email protected]' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user '[email protected]' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user '[email protected]' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user '[email protected]' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user '[email protected]' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user '[email protected]' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user '[email protected]' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user '[email protected]' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user 'ratelimit-actuation-sa@apache-beam-testing.iam.gserviceaccount.com' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user '[email protected]' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user 'tarun-dataflow-custom-sa@apache-beam-testing.iam.gserviceaccount.com' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user '[email protected]' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user '[email protected]' detected in GCP but not found in existing policy.
- Ngôn ngữ chính
- Java
- Star
- 8.7k
- Fork
- 4.7k
- Merge trung bình
- 2 ngày 4 giờ
- Pull request đã merge (30 ngày)
- 278
Chuẩn bị môi trường
- Không có Dockerfile hay tệp Docker Compose
- Có mẫu pull request
- Đọc hướng dẫn đóng góp
Bắt đầu từ đâu
- Đọc hết issue, rồi đọc hướng dẫn đóng góp của dự án.
- Bình luận trên issue rằng bạn sẽ nhận — tránh hai người làm cùng một việc.
- Fork repository và làm thay đổi trên một nhánh.
- Mở pull request có tham chiếu số hiệu của issue.
Issue khác của apache/beam
-
[Feature Request]: Support Protobuf 7.x in Python SDKCó thể đã có người làm @sofiathoren đã nhận 5 ngày trước. Đang mởP2 python
Độ khó 2/5 1-3 giờ Mức phù hợp với người mới 62/100
Maintainer thường phản hồi trong vòng 1 ngày
-
[Bug]: Row.toString throws for an ITERABLE field that is not backed by a ListCó thể đã có người làm @PDGGK đã nhận 66 ngày trước. Đang mởjava P3
Độ khó 2/5 1-3 giờ Mức phù hợp với người mới 76/100
Maintainer thường phản hồi trong vòng 1 ngày
-
Độ khó 2/5 1-3 giờ Mức phù hợp với người mới 68/100
apache/beam#39624 · 2 reaction ·
Maintainer thường phản hồi trong vòng 1 ngày
-
[Bug]: PubsubIO used in batch incorrect batch cutoff sizeCó thể đã có người làm @1fanwang đã nhận 55 ngày trước. Đang mởbug io P3 pinned pubsub
Độ khó 2/5 1-3 giờ Mức phù hợp với người mới 78/100
apache/beam#28011 · 4 bình luận ·
Maintainer thường phản hồi trong vòng 1 ngày
-
build P3 sub-task
Độ khó 1/5 Dưới một giờ Mức phù hợp với người mới 68/100
Maintainer thường phản hồi trong vòng 1 ngày
Issue tương tự
-
status: waiting-for-triage
Độ khó 2/5 1-3 giờ Mức phù hợp với người mới 79/100
spring-projects/spring-ai#7206 ·
Maintainer thường phản hồi trong vòng 2 ngày
-
area/cli
Độ khó 2/5 Nửa ngày Mức phù hợp với người mới 78/100
quarkusio/quarkus#57623 · 1 bình luận ·
Maintainer thường phản hồi trong vòng 1 ngày
-
Độ khó 2/5 1-3 giờ Mức phù hợp với người mới 72/100
jhipster/prettier-java#1113 ·
Maintainer thường phản hồi trong vòng 2 ngày
-
bug follow-up lane:backlog
Độ khó 2/5 1-3 giờ Mức phù hợp với người mới 82/100
Sanne/incus-spawn#1576 · 1 bình luận ·
Maintainer thường phản hồi trong vòng 1 ngày
-
Pasting code into a comment adds imports for the pasted codeCó thể đã có người làm @ravnskjaer đã nhận hôm nay. Đang mở
Độ khó 2/5 1-3 giờ Mức phù hợp với người mới 79/100
eclipse-jdt/eclipse.jdt.ui#3275 · 1 bình luận ·
Maintainer thường phản hồi trong vòng 1 ngày