Add the feature to automatically delete IAM policies that have a expired date IAM condition. [190493584]

Assigned

Feature Request

adexe s nau

Status Update

No update yet.

Description

ow...@google.com

created issue #1

Jun 8, 2021 02:49PM

Business Impact: Customer have to manually delete policies that are expired.

Issue summary:

Customer implemented the IAM policy conditions with an expiry time, to expire at midnight.
Although the roles are revoked at the described time, the IAM policy will still exist after.
Customer would like to have a way to automatically remove IAM policies when the conditions have expired.

There is no reference to such action on documentation: https://cloud.google.com/iam/docs/conditions-overview

Reproduction Steps:

Create an IAM policy with an expiration date as condition
When the expiration date is due, it is no longer effective and requires manual deletion.

Comments

ma...@google.com <ma...@google.com> Jul 3, 2023 01:43AM

Reassigned to ma...@google.com.

ma...@google.com <ma...@google.com> #2Jul 3, 2023 10:21AM

Reassigned to gc...@google.com.

Hello,

Thanks for reaching out to us!

The Product Engineering Team has been made aware of your feature request, and will address it in due course. Though we can't provide an ETA on feature requests nor guarantee their implementation, rest assured that your feedback is always taken very seriously, as it allows us to improve our products. Thank you for your trust and continued support to improve Google Cloud Platform products.

In case you want to report a new issue, please do not hesitate to create a new [Issue Tracker] 1 thread describing your issue. Once again, thank you for the suggestions.

Thanks and Regards,
Onkar Mhetre
Google Cloud Support

Issue 190493584

Description

Issue summary

Comments

ma...@google.com <ma...@google.com> Jul 3, 2023 01:43AM

ma...@google.com <ma...@google.com> #2Jul 3, 2023 10:21AM

Add comment

Issue metadata