3 ms·
By far the biggest missing control is you can't restrict access to google secrets manager by source CIDR. There were a bunch of other smaller nitpicks, but tha
by bsamuels 5y ago
By far the biggest missing control is you can't restrict access to google secrets manager by source CIDR.
There were a bunch of other smaller nitpicks, but that was the overwhelming reason last time I looked at it.
- tedk-42 5y agoIAM policies are designed for this reason, not IP based access controls. E.g. in AWS you can specify the source CIDR range in an IAM policy.