{
	"id": "41b5049c-eb3c-41a1-a6c4-98eff05a48de",
	"created_at": "2026-04-06T00:16:03.026548Z",
	"updated_at": "2026-04-10T03:20:32.744749Z",
	"deleted_at": null,
	"sha1_hash": "81d50bce51ff12358adc4cce5df9fd3af9a35d5e",
	"title": "Create IAM allow policies",
	"llm_title": "",
	"authors": "",
	"file_creation_date": "0001-01-01T00:00:00Z",
	"file_modification_date": "0001-01-01T00:00:00Z",
	"file_size": 932594,
	"plain_text": "Create IAM allow policies\r\nArchived: 2026-04-05 17:22:03 UTC\r\nautoscaling.sites.readRecommendations\r\nautoscaling.sites.writeMetrics\r\nautoscaling.sites.writeState\r\nbackupdr.backupPlanAssociations.createForComputeDisk\r\nbackupdr.backupPlanAssociations.createForComputeInstance\r\nbackupdr.backupPlanAssociations.createForFilestoreInstance\r\nbackupdr.backupPlanAssociations.deleteForComputeDisk\r\nbackupdr.backupPlanAssociations.deleteForComputeInstance\r\nbackupdr.backupPlanAssociations.deleteForFilestoreInstance\r\nbackupdr.backupPlanAssociations.fetchForComputeDisk\r\nbackupdr.backupPlanAssociations.fetchForFilestoreInstance\r\nbackupdr.backupPlanAssociations.getForComputeDisk\r\nbackupdr.backupPlanAssociations.getForFilestoreInstance\r\nbackupdr.backupPlanAssociations.list\r\nbackupdr.backupPlanAssociations.triggerBackupForComputeDisk\r\nbackupdr.backupPlanAssociations.triggerBackupForComputeInstance\r\nbackupdr.backupPlanAssociations.triggerBackupForFilestoreInstance\r\nbackupdr.backupPlanAssociations.updateForComputeDisk\r\nbackupdr.backupPlanAssociations.updateForComputeInstance\r\nbackupdr.backupPlanAssociations.updateForFilestoreInstance\r\nbackupdr.backupPlans.get\r\nbackupdr.backupPlans.list\r\nbackupdr.backupPlans.useForComputeDisk\r\nhttps://cloud.google.com/kubernetes-engine/docs/how-to/iam\r\nPage 1 of 57\n\nbackupdr.backupPlans.useForComputeInstance\r\nbackupdr.backupPlans.useForFilestoreInstance\r\nbackupdr.backupVaults.get\r\nbackupdr.backupVaults.list\r\nbackupdr.bvbackups.useReadOnlyForFilestoreInstance\r\nbackupdr.dataSourceReferences.fetchForFilestoreInstance\r\nbackupdr.dataSourceReferences.getForFilestoreInstance\r\nbackupdr.locations.list\r\nbackupdr.operations.get\r\nbackupdr.operations.list\r\nbackupdr.serviceConfig.initialize\r\nbigquery.datasets.create\r\nbigquery.datasets.get\r\nbigquery.tables.create\r\nbigquery.tables.get\r\nbigquery.tables.update\r\nbigquery.tables.updateData\r\nbinaryauthorization.policy.evaluatePolicy\r\ncertificatemanager.certissuanceconfigs.create\r\ncertificatemanager.certissuanceconfigs.delete\r\ncertificatemanager.certissuanceconfigs.get\r\ncertificatemanager.certissuanceconfigs.list\r\ncertificatemanager.certissuanceconfigs.listEffectiveTags\r\ncertificatemanager.certissuanceconfigs.listTagBindings\r\ncertificatemanager.certissuanceconfigs.update\r\ncertificatemanager.certissuanceconfigs.use\r\nhttps://cloud.google.com/kubernetes-engine/docs/how-to/iam\r\nPage 2 of 57\n\ncertificatemanager.certmapentries.create\r\ncertificatemanager.certmapentries.delete\r\ncertificatemanager.certmapentries.get\r\ncertificatemanager.certmapentries.list\r\ncertificatemanager.certmapentries.listEffectiveTags\r\ncertificatemanager.certmapentries.listTagBindings\r\ncertificatemanager.certmapentries.update\r\ncertificatemanager.certmaps.create\r\ncertificatemanager.certmaps.delete\r\ncertificatemanager.certmaps.get\r\ncertificatemanager.certmaps.list\r\ncertificatemanager.certmaps.listEffectiveTags\r\ncertificatemanager.certmaps.listTagBindings\r\ncertificatemanager.certmaps.update\r\ncertificatemanager.certmaps.use\r\ncertificatemanager.certs.create\r\ncertificatemanager.certs.delete\r\ncertificatemanager.certs.get\r\ncertificatemanager.certs.list\r\ncertificatemanager.certs.listEffectiveTags\r\ncertificatemanager.certs.listTagBindings\r\ncertificatemanager.certs.update\r\ncertificatemanager.certs.use\r\ncertificatemanager.dnsauthorizations.create\r\ncertificatemanager.dnsauthorizations.delete\r\ncertificatemanager.dnsauthorizations.get\r\nhttps://cloud.google.com/kubernetes-engine/docs/how-to/iam\r\nPage 3 of 57\n\ncertificatemanager.dnsauthorizations.list\r\ncertificatemanager.dnsauthorizations.listEffectiveTags\r\ncertificatemanager.dnsauthorizations.listTagBindings\r\ncertificatemanager.dnsauthorizations.update\r\ncertificatemanager.dnsauthorizations.use\r\ncertificatemanager.trustconfigs.create\r\ncertificatemanager.trustconfigs.delete\r\ncertificatemanager.trustconfigs.get\r\ncertificatemanager.trustconfigs.list\r\ncertificatemanager.trustconfigs.listEffectiveTags\r\ncertificatemanager.trustconfigs.listTagBindings\r\ncertificatemanager.trustconfigs.update\r\ncertificatemanager.trustconfigs.use\r\ncompute.acceleratorTypes.*\r\ncompute.acceleratorTypes.get\r\ncompute.acceleratorTypes.list\r\ncompute.addresses.*\r\ncompute.addresses.create\r\ncompute.addresses.createInternal\r\ncompute.addresses.createTagBinding\r\ncompute.addresses.delete\r\ncompute.addresses.deleteInternal\r\ncompute.addresses.deleteTagBinding\r\ncompute.addresses.get\r\ncompute.addresses.list\r\ncompute.addresses.listEffectiveTags\r\ncompute.addresses.listTagBindings\r\ncompute.addresses.setLabels\r\ncompute.addresses.use\r\ncompute.addresses.useInternal\r\nhttps://cloud.google.com/kubernetes-engine/docs/how-to/iam\r\nPage 4 of 57\n\ncompute.autoscalers.*\r\ncompute.autoscalers.create\r\ncompute.autoscalers.delete\r\ncompute.autoscalers.get\r\ncompute.autoscalers.list\r\ncompute.autoscalers.update\r\ncompute.backendBuckets.*\r\ncompute.backendBuckets.addSignedUrlKey\r\ncompute.backendBuckets.create\r\ncompute.backendBuckets.createTagBinding\r\ncompute.backendBuckets.delete\r\ncompute.backendBuckets.deleteSignedUrlKey\r\ncompute.backendBuckets.deleteTagBinding\r\ncompute.backendBuckets.get\r\ncompute.backendBuckets.getIamPolicy\r\ncompute.backendBuckets.list\r\ncompute.backendBuckets.listEffectiveTags\r\ncompute.backendBuckets.listTagBindings\r\ncompute.backendBuckets.setIamPolicy\r\ncompute.backendBuckets.setSecurityPolicy\r\ncompute.backendBuckets.update\r\ncompute.backendBuckets.use\r\ncompute.backendServices.*\r\nhttps://cloud.google.com/kubernetes-engine/docs/how-to/iam\r\nPage 5 of 57\n\ncompute.backendServices.addSignedUrlKey\r\ncompute.backendServices.create\r\ncompute.backendServices.createTagBinding\r\ncompute.backendServices.delete\r\ncompute.backendServices.deleteSignedUrlKey\r\ncompute.backendServices.deleteTagBinding\r\ncompute.backendServices.get\r\ncompute.backendServices.getIamPolicy\r\ncompute.backendServices.list\r\ncompute.backendServices.listEffectiveTags\r\ncompute.backendServices.listTagBindings\r\ncompute.backendServices.setIamPolicy\r\ncompute.backendServices.setSecurityPolicy\r\ncompute.backendServices.update\r\ncompute.backendServices.use\r\ncompute.crossSiteNetworks.*\r\ncompute.crossSiteNetworks.create\r\ncompute.crossSiteNetworks.delete\r\ncompute.crossSiteNetworks.get\r\ncompute.crossSiteNetworks.list\r\ncompute.crossSiteNetworks.update\r\ncompute.diskSettings.*\r\ncompute.diskSettings.get\r\ncompute.diskSettings.update\r\ncompute.diskTypes.*\r\ncompute.diskTypes.get\r\ncompute.diskTypes.list\r\ncompute.disks.*\r\ncompute.disks.addResourcePolicies\r\ncompute.disks.create\r\ncompute.disks.createSnapshot\r\ncompute.disks.createTagBinding\r\ncompute.disks.delete\r\ncompute.disks.deleteTagBinding\r\ncompute.disks.get\r\ncompute.disks.getIamPolicy\r\ncompute.disks.list\r\nhttps://cloud.google.com/kubernetes-engine/docs/how-to/iam\r\nPage 6 of 57\n\ncompute.disks.listEffectiveTags\r\ncompute.disks.listTagBindings\r\ncompute.disks.removeResourcePolicies\r\ncompute.disks.resize\r\ncompute.disks.setIamPolicy\r\ncompute.disks.setLabels\r\ncompute.disks.startAsyncReplication\r\ncompute.disks.stopAsyncReplication\r\ncompute.disks.stopGroupAsyncReplication\r\ncompute.disks.update\r\ncompute.disks.updateKmsKey\r\ncompute.disks.use\r\ncompute.disks.useReadOnly\r\ncompute.externalVpnGateways.*\r\ncompute.externalVpnGateways.create\r\ncompute.externalVpnGateways.createTagBinding\r\ncompute.externalVpnGateways.delete\r\ncompute.externalVpnGateways.deleteTagBinding\r\ncompute.externalVpnGateways.get\r\ncompute.externalVpnGateways.list\r\ncompute.externalVpnGateways.listEffectiveTags\r\ncompute.externalVpnGateways.listTagBindings\r\ncompute.externalVpnGateways.setLabels\r\ncompute.externalVpnGateways.use\r\ncompute.firewallPolicies.*\r\nhttps://cloud.google.com/kubernetes-engine/docs/how-to/iam\r\nPage 7 of 57\n\ncompute.firewallPolicies.cloneRules\r\ncompute.firewallPolicies.copyRules\r\ncompute.firewallPolicies.create\r\ncompute.firewallPolicies.createTagBinding\r\ncompute.firewallPolicies.delete\r\ncompute.firewallPolicies.deleteTagBinding\r\ncompute.firewallPolicies.get\r\ncompute.firewallPolicies.getIamPolicy\r\ncompute.firewallPolicies.list\r\ncompute.firewallPolicies.listEffectiveTags\r\ncompute.firewallPolicies.listTagBindings\r\ncompute.firewallPolicies.move\r\ncompute.firewallPolicies.setIamPolicy\r\ncompute.firewallPolicies.update\r\ncompute.firewallPolicies.use\r\ncompute.firewalls.*\r\ncompute.firewalls.create\r\ncompute.firewalls.createTagBinding\r\ncompute.firewalls.delete\r\ncompute.firewalls.deleteTagBinding\r\ncompute.firewalls.get\r\ncompute.firewalls.list\r\ncompute.firewalls.listEffectiveTags\r\ncompute.firewalls.listTagBindings\r\ncompute.firewalls.update\r\ncompute.forwardingRules.*\r\ncompute.forwardingRules.create\r\ncompute.forwardingRules.createTagBinding\r\ncompute.forwardingRules.delete\r\ncompute.forwardingRules.deleteTagBinding\r\ncompute.forwardingRules.get\r\ncompute.forwardingRules.list\r\ncompute.forwardingRules.listEffectiveTags\r\ncompute.forwardingRules.listTagBindings\r\ncompute.forwardingRules.pscCreate\r\ncompute.forwardingRules.pscDelete\r\ncompute.forwardingRules.pscSetLabels\r\ncompute.forwardingRules.pscUpdate\r\ncompute.forwardingRules.setLabels\r\ncompute.forwardingRules.setTarget\r\nhttps://cloud.google.com/kubernetes-engine/docs/how-to/iam\r\nPage 8 of 57\n\ncompute.forwardingRules.update\r\ncompute.forwardingRules.use\r\ncompute.futureReservations.list\r\ncompute.globalAddresses.*\r\ncompute.globalAddresses.create\r\ncompute.globalAddresses.createInternal\r\ncompute.globalAddresses.createTagBinding\r\ncompute.globalAddresses.delete\r\ncompute.globalAddresses.deleteInternal\r\ncompute.globalAddresses.deleteTagBinding\r\ncompute.globalAddresses.get\r\ncompute.globalAddresses.list\r\ncompute.globalAddresses.listEffectiveTags\r\ncompute.globalAddresses.listTagBindings\r\ncompute.globalAddresses.setLabels\r\ncompute.globalAddresses.use\r\ncompute.globalForwardingRules.*\r\ncompute.globalForwardingRules.create\r\ncompute.globalForwardingRules.createTagBinding\r\ncompute.globalForwardingRules.delete\r\ncompute.globalForwardingRules.deleteTagBinding\r\ncompute.globalForwardingRules.get\r\ncompute.globalForwardingRules.list\r\ncompute.globalForwardingRules.listEffectiveTags\r\ncompute.globalForwardingRules.listTagBindings\r\ncompute.globalForwardingRules.pscCreate\r\ncompute.globalForwardingRules.pscDelete\r\ncompute.globalForwardingRules.pscSetLabels\r\ncompute.globalForwardingRules.pscUpdate\r\ncompute.globalForwardingRules.setLabels\r\ncompute.globalForwardingRules.setTarget\r\ncompute.globalForwardingRules.update\r\ncompute.globalNetworkEndpointGroups.*\r\ncompute.globalNetworkEndpointGroups.attachNetworkEndpoints\r\ncompute.globalNetworkEndpointGroups.create\r\ncompute.globalNetworkEndpointGroups.createTagBinding\r\ncompute.globalNetworkEndpointGroups.delete\r\ncompute.globalNetworkEndpointGroups.deleteTagBinding\r\nhttps://cloud.google.com/kubernetes-engine/docs/how-to/iam\r\nPage 9 of 57\n\ncompute.globalNetworkEndpointGroups.detachNetworkEndpoints\r\ncompute.globalNetworkEndpointGroups.get\r\ncompute.globalNetworkEndpointGroups.list\r\ncompute.globalNetworkEndpointGroups.listEffectiveTags\r\ncompute.globalNetworkEndpointGroups.listTagBindings\r\ncompute.globalNetworkEndpointGroups.use\r\ncompute.globalOperations.get\r\ncompute.globalOperations.list\r\ncompute.globalPublicDelegatedPrefixes.delete\r\ncompute.globalPublicDelegatedPrefixes.get\r\ncompute.globalPublicDelegatedPrefixes.list\r\ncompute.globalPublicDelegatedPrefixes.updatePolicy\r\ncompute.healthChecks.*\r\ncompute.healthChecks.create\r\ncompute.healthChecks.createTagBinding\r\ncompute.healthChecks.delete\r\ncompute.healthChecks.deleteTagBinding\r\ncompute.healthChecks.get\r\ncompute.healthChecks.list\r\ncompute.healthChecks.listEffectiveTags\r\ncompute.healthChecks.listTagBindings\r\ncompute.healthChecks.update\r\ncompute.healthChecks.use\r\ncompute.healthChecks.useReadOnly\r\ncompute.httpHealthChecks.*\r\nhttps://cloud.google.com/kubernetes-engine/docs/how-to/iam\r\nPage 10 of 57\n\ncompute.httpHealthChecks.create\r\ncompute.httpHealthChecks.createTagBinding\r\ncompute.httpHealthChecks.delete\r\ncompute.httpHealthChecks.deleteTagBinding\r\ncompute.httpHealthChecks.get\r\ncompute.httpHealthChecks.list\r\ncompute.httpHealthChecks.listEffectiveTags\r\ncompute.httpHealthChecks.listTagBindings\r\ncompute.httpHealthChecks.update\r\ncompute.httpHealthChecks.use\r\ncompute.httpHealthChecks.useReadOnly\r\ncompute.httpsHealthChecks.*\r\ncompute.httpsHealthChecks.create\r\ncompute.httpsHealthChecks.createTagBinding\r\ncompute.httpsHealthChecks.delete\r\ncompute.httpsHealthChecks.deleteTagBinding\r\ncompute.httpsHealthChecks.get\r\ncompute.httpsHealthChecks.list\r\ncompute.httpsHealthChecks.listEffectiveTags\r\ncompute.httpsHealthChecks.listTagBindings\r\ncompute.httpsHealthChecks.update\r\ncompute.httpsHealthChecks.use\r\ncompute.httpsHealthChecks.useReadOnly\r\ncompute.images.*\r\nhttps://cloud.google.com/kubernetes-engine/docs/how-to/iam\r\nPage 11 of 57\n\ncompute.images.create\r\ncompute.images.createTagBinding\r\ncompute.images.delete\r\ncompute.images.deleteTagBinding\r\ncompute.images.deprecate\r\ncompute.images.get\r\ncompute.images.getFromFamily\r\ncompute.images.getIamPolicy\r\ncompute.images.list\r\ncompute.images.listEffectiveTags\r\ncompute.images.listTagBindings\r\ncompute.images.setIamPolicy\r\ncompute.images.setLabels\r\ncompute.images.update\r\ncompute.images.useReadOnly\r\ncompute.instanceGroupManagers.*\r\ncompute.instanceGroupManagers.create\r\ncompute.instanceGroupManagers.createTagBinding\r\ncompute.instanceGroupManagers.delete\r\ncompute.instanceGroupManagers.deleteTagBinding\r\ncompute.instanceGroupManagers.get\r\ncompute.instanceGroupManagers.list\r\ncompute.instanceGroupManagers.listEffectiveTags\r\ncompute.instanceGroupManagers.listTagBindings\r\ncompute.instanceGroupManagers.update\r\ncompute.instanceGroupManagers.use\r\ncompute.instanceGroups.*\r\ncompute.instanceGroups.create\r\ncompute.instanceGroups.createTagBinding\r\ncompute.instanceGroups.delete\r\ncompute.instanceGroups.deleteTagBinding\r\ncompute.instanceGroups.get\r\ncompute.instanceGroups.list\r\ncompute.instanceGroups.listEffectiveTags\r\ncompute.instanceGroups.listTagBindings\r\ncompute.instanceGroups.update\r\ncompute.instanceGroups.use\r\nhttps://cloud.google.com/kubernetes-engine/docs/how-to/iam\r\nPage 12 of 57\n\ncompute.instanceSettings.*\r\ncompute.instanceSettings.get\r\ncompute.instanceSettings.update\r\ncompute.instanceTemplates.*\r\ncompute.instanceTemplates.create\r\ncompute.instanceTemplates.delete\r\ncompute.instanceTemplates.get\r\ncompute.instanceTemplates.getIamPolicy\r\ncompute.instanceTemplates.list\r\ncompute.instanceTemplates.setIamPolicy\r\ncompute.instanceTemplates.useReadOnly\r\ncompute.instances.*\r\ncompute.instances.addAccessConfig\r\ncompute.instances.addNetworkInterface\r\ncompute.instances.addResourcePolicies\r\ncompute.instances.attachDisk\r\ncompute.instances.create\r\ncompute.instances.createTagBinding\r\ncompute.instances.delete\r\ncompute.instances.deleteAccessConfig\r\ncompute.instances.deleteNetworkInterface\r\ncompute.instances.deleteTagBinding\r\ncompute.instances.detachDisk\r\ncompute.instances.get\r\ncompute.instances.getEffectiveFirewalls\r\ncompute.instances.getGuestAttributes\r\ncompute.instances.getIamPolicy\r\ncompute.instances.getScreenshot\r\ncompute.instances.getSerialPortOutput\r\ncompute.instances.getShieldedInstanceIdentity\r\ncompute.instances.getShieldedVmIdentity\r\ncompute.instances.list\r\ncompute.instances.listEffectiveTags\r\ncompute.instances.listReferrers\r\ncompute.instances.listTagBindings\r\ncompute.instances.osAdminLogin\r\ncompute.instances.osLogin\r\ncompute.instances.pscInterfaceCreate\r\ncompute.instances.removeResourcePolicies\r\nhttps://cloud.google.com/kubernetes-engine/docs/how-to/iam\r\nPage 13 of 57\n\ncompute.instances.reset\r\ncompute.instances.resume\r\ncompute.instances.sendDiagnosticInterrupt\r\ncompute.instances.setDeletionProtection\r\ncompute.instances.setDiskAutoDelete\r\ncompute.instances.setIamPolicy\r\ncompute.instances.setLabels\r\ncompute.instances.setMachineResources\r\ncompute.instances.setMachineType\r\ncompute.instances.setMetadata\r\ncompute.instances.setMinCpuPlatform\r\ncompute.instances.setName\r\ncompute.instances.setScheduling\r\ncompute.instances.setSecurityPolicy\r\ncompute.instances.setServiceAccount\r\ncompute.instances.setShieldedInstanceIntegrityPolicy\r\ncompute.instances.setShieldedVmIntegrityPolicy\r\ncompute.instances.setTags\r\ncompute.instances.simulateMaintenanceEvent\r\ncompute.instances.start\r\ncompute.instances.startWithEncryptionKey\r\ncompute.instances.stop\r\ncompute.instances.suspend\r\ncompute.instances.update\r\ncompute.instances.updateAccessConfig\r\ncompute.instances.updateDisplayDevice\r\ncompute.instances.updateNetworkInterface\r\ncompute.instances.updateSecurity\r\ncompute.instances.updateShieldedInstanceConfig\r\ncompute.instances.updateShieldedVmConfig\r\ncompute.instances.use\r\ncompute.instances.useReadOnly\r\ncompute.instantSnapshotGroups.*\r\ncompute.instantSnapshotGroups.create\r\ncompute.instantSnapshotGroups.delete\r\ncompute.instantSnapshotGroups.get\r\ncompute.instantSnapshotGroups.getIamPolicy\r\ncompute.instantSnapshotGroups.list\r\ncompute.instantSnapshotGroups.setIamPolicy\r\ncompute.instantSnapshotGroups.useReadOnly\r\nhttps://cloud.google.com/kubernetes-engine/docs/how-to/iam\r\nPage 14 of 57\n\ncompute.instantSnapshots.create\r\ncompute.instantSnapshots.delete\r\ncompute.instantSnapshots.export\r\ncompute.instantSnapshots.get\r\ncompute.instantSnapshots.getIamPolicy\r\ncompute.instantSnapshots.list\r\ncompute.instantSnapshots.listEffectiveTags\r\ncompute.instantSnapshots.listTagBindings\r\ncompute.instantSnapshots.setIamPolicy\r\ncompute.instantSnapshots.setLabels\r\ncompute.instantSnapshots.useReadOnly\r\ncompute.interconnectAttachmentGroups.*\r\ncompute.interconnectAttachmentGroups.create\r\ncompute.interconnectAttachmentGroups.delete\r\ncompute.interconnectAttachmentGroups.get\r\ncompute.interconnectAttachmentGroups.list\r\ncompute.interconnectAttachmentGroups.patch\r\ncompute.interconnectAttachments.*\r\ncompute.interconnectAttachments.create\r\ncompute.interconnectAttachments.createTagBinding\r\ncompute.interconnectAttachments.delete\r\ncompute.interconnectAttachments.deleteTagBinding\r\ncompute.interconnectAttachments.get\r\ncompute.interconnectAttachments.list\r\ncompute.interconnectAttachments.listEffectiveTags\r\ncompute.interconnectAttachments.listTagBindings\r\ncompute.interconnectAttachments.setLabels\r\ncompute.interconnectAttachments.update\r\ncompute.interconnectAttachments.use\r\ncompute.interconnectGroups.*\r\ncompute.interconnectGroups.create\r\ncompute.interconnectGroups.delete\r\nhttps://cloud.google.com/kubernetes-engine/docs/how-to/iam\r\nPage 15 of 57\n\ncompute.interconnectGroups.get\r\ncompute.interconnectGroups.list\r\ncompute.interconnectGroups.patch\r\ncompute.interconnectLocations.*\r\ncompute.interconnectLocations.get\r\ncompute.interconnectLocations.list\r\ncompute.interconnectRemoteLocations.*\r\ncompute.interconnectRemoteLocations.get\r\ncompute.interconnectRemoteLocations.list\r\ncompute.interconnects.*\r\ncompute.interconnects.create\r\ncompute.interconnects.createTagBinding\r\ncompute.interconnects.delete\r\ncompute.interconnects.deleteTagBinding\r\ncompute.interconnects.get\r\ncompute.interconnects.getMacsecConfig\r\ncompute.interconnects.list\r\ncompute.interconnects.listEffectiveTags\r\ncompute.interconnects.listTagBindings\r\ncompute.interconnects.setLabels\r\ncompute.interconnects.update\r\ncompute.interconnects.use\r\ncompute.licenseCodes.*\r\ncompute.licenseCodes.get\r\ncompute.licenseCodes.getIamPolicy\r\ncompute.licenseCodes.list\r\ncompute.licenseCodes.setIamPolicy\r\ncompute.licenses.create\r\ncompute.licenses.delete\r\ncompute.licenses.get\r\ncompute.licenses.getIamPolicy\r\ncompute.licenses.list\r\ncompute.licenses.listEffectiveTags\r\nhttps://cloud.google.com/kubernetes-engine/docs/how-to/iam\r\nPage 16 of 57\n\ncompute.licenses.listTagBindings\r\ncompute.licenses.setIamPolicy\r\ncompute.licenses.update\r\ncompute.machineImages.create\r\ncompute.machineImages.delete\r\ncompute.machineImages.get\r\ncompute.machineImages.getIamPolicy\r\ncompute.machineImages.list\r\ncompute.machineImages.listEffectiveTags\r\ncompute.machineImages.listTagBindings\r\ncompute.machineImages.setIamPolicy\r\ncompute.machineImages.setLabels\r\ncompute.machineImages.useReadOnly\r\ncompute.machineTypes.*\r\ncompute.machineTypes.get\r\ncompute.machineTypes.list\r\ncompute.multiMig.*\r\ncompute.multiMig.create\r\ncompute.multiMig.delete\r\ncompute.multiMig.get\r\ncompute.multiMig.list\r\ncompute.multiMigMembers.*\r\ncompute.multiMigMembers.get\r\ncompute.multiMigMembers.list\r\ncompute.networkAttachments.*\r\ncompute.networkAttachments.create\r\ncompute.networkAttachments.createTagBinding\r\ncompute.networkAttachments.delete\r\ncompute.networkAttachments.deleteTagBinding\r\ncompute.networkAttachments.get\r\nhttps://cloud.google.com/kubernetes-engine/docs/how-to/iam\r\nPage 17 of 57\n\ncompute.networkAttachments.getIamPolicy\r\ncompute.networkAttachments.list\r\ncompute.networkAttachments.listEffectiveTags\r\ncompute.networkAttachments.listTagBindings\r\ncompute.networkAttachments.setIamPolicy\r\ncompute.networkAttachments.update\r\ncompute.networkAttachments.use\r\ncompute.networkEndpointGroups.*\r\ncompute.networkEndpointGroups.attachNetworkEndpoints\r\ncompute.networkEndpointGroups.create\r\ncompute.networkEndpointGroups.createTagBinding\r\ncompute.networkEndpointGroups.delete\r\ncompute.networkEndpointGroups.deleteTagBinding\r\ncompute.networkEndpointGroups.detachNetworkEndpoints\r\ncompute.networkEndpointGroups.get\r\ncompute.networkEndpointGroups.list\r\ncompute.networkEndpointGroups.listEffectiveTags\r\ncompute.networkEndpointGroups.listTagBindings\r\ncompute.networkEndpointGroups.use\r\ncompute.networkProfiles.*\r\ncompute.networkProfiles.get\r\ncompute.networkProfiles.list\r\ncompute.networks.*\r\ncompute.networks.access\r\ncompute.networks.addPeering\r\ncompute.networks.create\r\ncompute.networks.createTagBinding\r\ncompute.networks.delete\r\ncompute.networks.deleteTagBinding\r\ncompute.networks.get\r\ncompute.networks.getEffectiveFirewalls\r\ncompute.networks.getRegionEffectiveFirewalls\r\ncompute.networks.list\r\ncompute.networks.listEffectiveTags\r\ncompute.networks.listPeeringRoutes\r\ncompute.networks.listTagBindings\r\ncompute.networks.mirror\r\ncompute.networks.removePeering\r\nhttps://cloud.google.com/kubernetes-engine/docs/how-to/iam\r\nPage 18 of 57\n\ncompute.networks.setFirewallPolicy\r\ncompute.networks.setNetworkPolicy\r\ncompute.networks.switchToCustomMode\r\ncompute.networks.update\r\ncompute.networks.updatePeering\r\ncompute.networks.updatePolicy\r\ncompute.networks.use\r\ncompute.networks.useExternalIp\r\ncompute.nodeGroups.get\r\ncompute.packetMirrorings.*\r\ncompute.packetMirrorings.create\r\ncompute.packetMirrorings.createTagBinding\r\ncompute.packetMirrorings.delete\r\ncompute.packetMirrorings.deleteTagBinding\r\ncompute.packetMirrorings.get\r\ncompute.packetMirrorings.list\r\ncompute.packetMirrorings.listEffectiveTags\r\ncompute.packetMirrorings.listTagBindings\r\ncompute.packetMirrorings.update\r\ncompute.projects.get\r\ncompute.projects.setCommonInstanceMetadata\r\ncompute.publicDelegatedPrefixes.delete\r\ncompute.publicDelegatedPrefixes.get\r\ncompute.publicDelegatedPrefixes.list\r\ncompute.publicDelegatedPrefixes.listEffectiveTags\r\ncompute.publicDelegatedPrefixes.listTagBindings\r\ncompute.publicDelegatedPrefixes.update\r\ncompute.publicDelegatedPrefixes.updatePolicy\r\ncompute.regionBackendBuckets.*\r\ncompute.regionBackendBuckets.create\r\ncompute.regionBackendBuckets.createTagBinding\r\ncompute.regionBackendBuckets.delete\r\ncompute.regionBackendBuckets.deleteTagBinding\r\nhttps://cloud.google.com/kubernetes-engine/docs/how-to/iam\r\nPage 19 of 57\n\ncompute.regionBackendBuckets.get\r\ncompute.regionBackendBuckets.getIamPolicy\r\ncompute.regionBackendBuckets.list\r\ncompute.regionBackendBuckets.listEffectiveTags\r\ncompute.regionBackendBuckets.listTagBindings\r\ncompute.regionBackendBuckets.setIamPolicy\r\ncompute.regionBackendBuckets.update\r\ncompute.regionBackendBuckets.use\r\ncompute.regionBackendServices.*\r\ncompute.regionBackendServices.create\r\ncompute.regionBackendServices.createTagBinding\r\ncompute.regionBackendServices.delete\r\ncompute.regionBackendServices.deleteTagBinding\r\ncompute.regionBackendServices.get\r\ncompute.regionBackendServices.getIamPolicy\r\ncompute.regionBackendServices.list\r\ncompute.regionBackendServices.listEffectiveTags\r\ncompute.regionBackendServices.listTagBindings\r\ncompute.regionBackendServices.setIamPolicy\r\ncompute.regionBackendServices.setSecurityPolicy\r\ncompute.regionBackendServices.update\r\ncompute.regionBackendServices.use\r\ncompute.regionCompositeHealthChecks.*\r\ncompute.regionCompositeHealthChecks.create\r\ncompute.regionCompositeHealthChecks.delete\r\ncompute.regionCompositeHealthChecks.get\r\ncompute.regionCompositeHealthChecks.list\r\ncompute.regionCompositeHealthChecks.update\r\ncompute.regionFirewallPolicies.*\r\ncompute.regionFirewallPolicies.cloneRules\r\ncompute.regionFirewallPolicies.create\r\ncompute.regionFirewallPolicies.createTagBinding\r\ncompute.regionFirewallPolicies.delete\r\ncompute.regionFirewallPolicies.deleteTagBinding\r\ncompute.regionFirewallPolicies.get\r\ncompute.regionFirewallPolicies.getIamPolicy\r\ncompute.regionFirewallPolicies.list\r\ncompute.regionFirewallPolicies.listEffectiveTags\r\nhttps://cloud.google.com/kubernetes-engine/docs/how-to/iam\r\nPage 20 of 57\n\ncompute.regionFirewallPolicies.listTagBindings\r\ncompute.regionFirewallPolicies.setIamPolicy\r\ncompute.regionFirewallPolicies.update\r\ncompute.regionFirewallPolicies.use\r\ncompute.regionHealthAggregationPolicies.*\r\ncompute.regionHealthAggregationPolicies.create\r\ncompute.regionHealthAggregationPolicies.delete\r\ncompute.regionHealthAggregationPolicies.get\r\ncompute.regionHealthAggregationPolicies.list\r\ncompute.regionHealthAggregationPolicies.update\r\ncompute.regionHealthCheckServices.*\r\ncompute.regionHealthCheckServices.create\r\ncompute.regionHealthCheckServices.delete\r\ncompute.regionHealthCheckServices.get\r\ncompute.regionHealthCheckServices.list\r\ncompute.regionHealthCheckServices.update\r\ncompute.regionHealthCheckServices.use\r\ncompute.regionHealthChecks.*\r\ncompute.regionHealthChecks.create\r\ncompute.regionHealthChecks.createTagBinding\r\ncompute.regionHealthChecks.delete\r\ncompute.regionHealthChecks.deleteTagBinding\r\ncompute.regionHealthChecks.get\r\ncompute.regionHealthChecks.list\r\ncompute.regionHealthChecks.listEffectiveTags\r\ncompute.regionHealthChecks.listTagBindings\r\ncompute.regionHealthChecks.update\r\ncompute.regionHealthChecks.use\r\ncompute.regionHealthChecks.useReadOnly\r\ncompute.regionHealthSources.*\r\ncompute.regionHealthSources.create\r\ncompute.regionHealthSources.delete\r\ncompute.regionHealthSources.get\r\ncompute.regionHealthSources.list\r\ncompute.regionHealthSources.update\r\nhttps://cloud.google.com/kubernetes-engine/docs/how-to/iam\r\nPage 21 of 57\n\ncompute.regionNetworkEndpointGroups.*\r\ncompute.regionNetworkEndpointGroups.attachNetworkEndpoints\r\ncompute.regionNetworkEndpointGroups.create\r\ncompute.regionNetworkEndpointGroups.createTagBinding\r\ncompute.regionNetworkEndpointGroups.delete\r\ncompute.regionNetworkEndpointGroups.deleteTagBinding\r\ncompute.regionNetworkEndpointGroups.detachNetworkEndpoints\r\ncompute.regionNetworkEndpointGroups.get\r\ncompute.regionNetworkEndpointGroups.list\r\ncompute.regionNetworkEndpointGroups.listEffectiveTags\r\ncompute.regionNetworkEndpointGroups.listTagBindings\r\ncompute.regionNetworkEndpointGroups.use\r\ncompute.regionNetworkPolicies.*\r\ncompute.regionNetworkPolicies.create\r\ncompute.regionNetworkPolicies.delete\r\ncompute.regionNetworkPolicies.get\r\ncompute.regionNetworkPolicies.list\r\ncompute.regionNetworkPolicies.update\r\ncompute.regionNetworkPolicies.use\r\ncompute.regionNotificationEndpoints.*\r\ncompute.regionNotificationEndpoints.create\r\ncompute.regionNotificationEndpoints.delete\r\ncompute.regionNotificationEndpoints.get\r\ncompute.regionNotificationEndpoints.list\r\ncompute.regionNotificationEndpoints.update\r\ncompute.regionNotificationEndpoints.use\r\ncompute.regionOperations.get\r\ncompute.regionOperations.list\r\ncompute.regionSecurityPolicies.*\r\ncompute.regionSecurityPolicies.create\r\ncompute.regionSecurityPolicies.createTagBinding\r\ncompute.regionSecurityPolicies.delete\r\ncompute.regionSecurityPolicies.deleteTagBinding\r\ncompute.regionSecurityPolicies.get\r\ncompute.regionSecurityPolicies.list\r\ncompute.regionSecurityPolicies.listEffectiveTags\r\ncompute.regionSecurityPolicies.listTagBindings\r\nhttps://cloud.google.com/kubernetes-engine/docs/how-to/iam\r\nPage 22 of 57\n\ncompute.regionSecurityPolicies.update\r\ncompute.regionSecurityPolicies.use\r\ncompute.regionSslCertificates.*\r\ncompute.regionSslCertificates.create\r\ncompute.regionSslCertificates.createTagBinding\r\ncompute.regionSslCertificates.delete\r\ncompute.regionSslCertificates.deleteTagBinding\r\ncompute.regionSslCertificates.get\r\ncompute.regionSslCertificates.list\r\ncompute.regionSslCertificates.listEffectiveTags\r\ncompute.regionSslCertificates.listTagBindings\r\ncompute.regionSslPolicies.*\r\ncompute.regionSslPolicies.create\r\ncompute.regionSslPolicies.createTagBinding\r\ncompute.regionSslPolicies.delete\r\ncompute.regionSslPolicies.deleteTagBinding\r\ncompute.regionSslPolicies.get\r\ncompute.regionSslPolicies.list\r\ncompute.regionSslPolicies.listAvailableFeatures\r\ncompute.regionSslPolicies.listEffectiveTags\r\ncompute.regionSslPolicies.listTagBindings\r\ncompute.regionSslPolicies.update\r\ncompute.regionSslPolicies.use\r\ncompute.regionTargetHttpProxies.*\r\ncompute.regionTargetHttpProxies.create\r\ncompute.regionTargetHttpProxies.createTagBinding\r\ncompute.regionTargetHttpProxies.delete\r\ncompute.regionTargetHttpProxies.deleteTagBinding\r\ncompute.regionTargetHttpProxies.get\r\ncompute.regionTargetHttpProxies.list\r\ncompute.regionTargetHttpProxies.listEffectiveTags\r\ncompute.regionTargetHttpProxies.listTagBindings\r\ncompute.regionTargetHttpProxies.setUrlMap\r\ncompute.regionTargetHttpProxies.use\r\ncompute.regionTargetHttpsProxies.*\r\ncompute.regionTargetHttpsProxies.create\r\ncompute.regionTargetHttpsProxies.createTagBinding\r\nhttps://cloud.google.com/kubernetes-engine/docs/how-to/iam\r\nPage 23 of 57\n\ncompute.regionTargetHttpsProxies.delete\r\ncompute.regionTargetHttpsProxies.deleteTagBinding\r\ncompute.regionTargetHttpsProxies.get\r\ncompute.regionTargetHttpsProxies.list\r\ncompute.regionTargetHttpsProxies.listEffectiveTags\r\ncompute.regionTargetHttpsProxies.listTagBindings\r\ncompute.regionTargetHttpsProxies.setSslCertificates\r\ncompute.regionTargetHttpsProxies.setUrlMap\r\ncompute.regionTargetHttpsProxies.update\r\ncompute.regionTargetHttpsProxies.use\r\ncompute.regionTargetTcpProxies.*\r\ncompute.regionTargetTcpProxies.attach\r\ncompute.regionTargetTcpProxies.create\r\ncompute.regionTargetTcpProxies.createTagBinding\r\ncompute.regionTargetTcpProxies.delete\r\ncompute.regionTargetTcpProxies.deleteTagBinding\r\ncompute.regionTargetTcpProxies.get\r\ncompute.regionTargetTcpProxies.list\r\ncompute.regionTargetTcpProxies.listEffectiveTags\r\ncompute.regionTargetTcpProxies.listTagBindings\r\ncompute.regionTargetTcpProxies.use\r\ncompute.regionUrlMaps.*\r\ncompute.regionUrlMaps.create\r\ncompute.regionUrlMaps.createTagBinding\r\ncompute.regionUrlMaps.delete\r\ncompute.regionUrlMaps.deleteTagBinding\r\ncompute.regionUrlMaps.get\r\ncompute.regionUrlMaps.invalidateCache\r\ncompute.regionUrlMaps.list\r\ncompute.regionUrlMaps.listEffectiveTags\r\ncompute.regionUrlMaps.listTagBindings\r\ncompute.regionUrlMaps.update\r\ncompute.regionUrlMaps.use\r\ncompute.regionUrlMaps.validate\r\ncompute.regions.*\r\ncompute.regions.get\r\ncompute.regions.list\r\ncompute.reservationBlocks.get\r\nhttps://cloud.google.com/kubernetes-engine/docs/how-to/iam\r\nPage 24 of 57\n\ncompute.reservationBlocks.list\r\ncompute.reservationSubBlocks.*\r\ncompute.reservationSubBlocks.get\r\ncompute.reservationSubBlocks.list\r\ncompute.reservationSubBlocks.performMaintenance\r\ncompute.reservationSubBlocks.reportFaulty\r\ncompute.reservations.get\r\ncompute.reservations.list\r\ncompute.reservations.listEffectiveTags\r\ncompute.reservations.listTagBindings\r\ncompute.resourcePolicies.*\r\ncompute.resourcePolicies.create\r\ncompute.resourcePolicies.delete\r\ncompute.resourcePolicies.get\r\ncompute.resourcePolicies.getIamPolicy\r\ncompute.resourcePolicies.list\r\ncompute.resourcePolicies.setIamPolicy\r\ncompute.resourcePolicies.update\r\ncompute.resourcePolicies.use\r\ncompute.resourcePolicies.useReadOnly\r\ncompute.routers.*\r\nhttps://cloud.google.com/kubernetes-engine/docs/how-to/iam\r\nPage 25 of 57\n\ncompute.routers.create\r\ncompute.routers.createTagBinding\r\ncompute.routers.delete\r\ncompute.routers.deleteRoutePolicy\r\ncompute.routers.deleteTagBinding\r\ncompute.routers.get\r\ncompute.routers.getRoutePolicy\r\ncompute.routers.list\r\ncompute.routers.listBgpRoutes\r\ncompute.routers.listEffectiveTags\r\ncompute.routers.listRoutePolicies\r\ncompute.routers.listTagBindings\r\ncompute.routers.update\r\ncompute.routers.updateRoutePolicy\r\ncompute.routers.use\r\ncompute.routes.*\r\ncompute.routes.create\r\ncompute.routes.createTagBinding\r\ncompute.routes.delete\r\ncompute.routes.deleteTagBinding\r\ncompute.routes.get\r\ncompute.routes.list\r\ncompute.routes.listEffectiveTags\r\ncompute.routes.listTagBindings\r\ncompute.securityPolicies.*\r\nhttps://cloud.google.com/kubernetes-engine/docs/how-to/iam\r\nPage 26 of 57\n\ncompute.securityPolicies.addAssociation\r\ncompute.securityPolicies.copyRules\r\ncompute.securityPolicies.create\r\ncompute.securityPolicies.createTagBinding\r\ncompute.securityPolicies.delete\r\ncompute.securityPolicies.deleteTagBinding\r\ncompute.securityPolicies.get\r\ncompute.securityPolicies.list\r\ncompute.securityPolicies.listEffectiveTags\r\ncompute.securityPolicies.listTagBindings\r\ncompute.securityPolicies.move\r\ncompute.securityPolicies.removeAssociation\r\ncompute.securityPolicies.setLabels\r\ncompute.securityPolicies.update\r\ncompute.securityPolicies.use\r\ncompute.serviceAttachments.*\r\ncompute.serviceAttachments.create\r\ncompute.serviceAttachments.createTagBinding\r\ncompute.serviceAttachments.delete\r\ncompute.serviceAttachments.deleteTagBinding\r\ncompute.serviceAttachments.get\r\ncompute.serviceAttachments.getIamPolicy\r\ncompute.serviceAttachments.list\r\ncompute.serviceAttachments.listEffectiveTags\r\ncompute.serviceAttachments.listTagBindings\r\ncompute.serviceAttachments.setIamPolicy\r\ncompute.serviceAttachments.update\r\ncompute.serviceAttachments.use\r\ncompute.snapshotGroups.*\r\ncompute.snapshotGroups.create\r\ncompute.snapshotGroups.delete\r\ncompute.snapshotGroups.get\r\ncompute.snapshotGroups.getIamPolicy\r\ncompute.snapshotGroups.list\r\ncompute.snapshotGroups.setIamPolicy\r\ncompute.snapshotGroups.useReadOnly\r\ncompute.snapshots.*\r\ncompute.snapshots.create\r\nhttps://cloud.google.com/kubernetes-engine/docs/how-to/iam\r\nPage 27 of 57\n\ncompute.snapshots.createTagBinding\r\ncompute.snapshots.delete\r\ncompute.snapshots.deleteTagBinding\r\ncompute.snapshots.get\r\ncompute.snapshots.getIamPolicy\r\ncompute.snapshots.list\r\ncompute.snapshots.listEffectiveTags\r\ncompute.snapshots.listTagBindings\r\ncompute.snapshots.setIamPolicy\r\ncompute.snapshots.setLabels\r\ncompute.snapshots.updateKmsKey\r\ncompute.snapshots.useReadOnly\r\ncompute.spotAssistants.get\r\ncompute.sslCertificates.*\r\ncompute.sslCertificates.create\r\ncompute.sslCertificates.createTagBinding\r\ncompute.sslCertificates.delete\r\ncompute.sslCertificates.deleteTagBinding\r\ncompute.sslCertificates.get\r\ncompute.sslCertificates.list\r\ncompute.sslCertificates.listEffectiveTags\r\ncompute.sslCertificates.listTagBindings\r\ncompute.sslPolicies.*\r\ncompute.sslPolicies.create\r\ncompute.sslPolicies.createTagBinding\r\ncompute.sslPolicies.delete\r\ncompute.sslPolicies.deleteTagBinding\r\ncompute.sslPolicies.get\r\ncompute.sslPolicies.list\r\ncompute.sslPolicies.listAvailableFeatures\r\ncompute.sslPolicies.listEffectiveTags\r\ncompute.sslPolicies.listTagBindings\r\ncompute.sslPolicies.update\r\ncompute.sslPolicies.use\r\ncompute.storagePools.create\r\ncompute.storagePools.delete\r\ncompute.storagePools.get\r\nhttps://cloud.google.com/kubernetes-engine/docs/how-to/iam\r\nPage 28 of 57\n\ncompute.storagePools.getIamPolicy\r\ncompute.storagePools.list\r\ncompute.storagePools.listEffectiveTags\r\ncompute.storagePools.listTagBindings\r\ncompute.storagePools.setIamPolicy\r\ncompute.storagePools.update\r\ncompute.storagePools.use\r\ncompute.subnetworks.*\r\ncompute.subnetworks.create\r\ncompute.subnetworks.createTagBinding\r\ncompute.subnetworks.delete\r\ncompute.subnetworks.deleteTagBinding\r\ncompute.subnetworks.expandIpCidrRange\r\ncompute.subnetworks.get\r\ncompute.subnetworks.getIamPolicy\r\ncompute.subnetworks.list\r\ncompute.subnetworks.listEffectiveTags\r\ncompute.subnetworks.listTagBindings\r\ncompute.subnetworks.mirror\r\ncompute.subnetworks.setIamPolicy\r\ncompute.subnetworks.setPrivateIpGoogleAccess\r\ncompute.subnetworks.update\r\ncompute.subnetworks.use\r\ncompute.subnetworks.useExternalIp\r\ncompute.subnetworks.usePeerMigration\r\ncompute.targetGrpcProxies.*\r\nhttps://cloud.google.com/kubernetes-engine/docs/how-to/iam\r\nPage 29 of 57\n\ncompute.targetGrpcProxies.create\r\ncompute.targetGrpcProxies.createTagBinding\r\ncompute.targetGrpcProxies.delete\r\ncompute.targetGrpcProxies.deleteTagBinding\r\ncompute.targetGrpcProxies.get\r\ncompute.targetGrpcProxies.list\r\ncompute.targetGrpcProxies.listEffectiveTags\r\ncompute.targetGrpcProxies.listTagBindings\r\ncompute.targetGrpcProxies.update\r\ncompute.targetGrpcProxies.use\r\ncompute.targetHttpProxies.*\r\ncompute.targetHttpProxies.create\r\ncompute.targetHttpProxies.createTagBinding\r\ncompute.targetHttpProxies.delete\r\ncompute.targetHttpProxies.deleteTagBinding\r\ncompute.targetHttpProxies.get\r\ncompute.targetHttpProxies.list\r\ncompute.targetHttpProxies.listEffectiveTags\r\ncompute.targetHttpProxies.listTagBindings\r\ncompute.targetHttpProxies.setUrlMap\r\ncompute.targetHttpProxies.update\r\ncompute.targetHttpProxies.use\r\ncompute.targetHttpsProxies.*\r\ncompute.targetHttpsProxies.create\r\ncompute.targetHttpsProxies.createTagBinding\r\ncompute.targetHttpsProxies.delete\r\ncompute.targetHttpsProxies.deleteTagBinding\r\ncompute.targetHttpsProxies.get\r\ncompute.targetHttpsProxies.list\r\ncompute.targetHttpsProxies.listEffectiveTags\r\ncompute.targetHttpsProxies.listTagBindings\r\ncompute.targetHttpsProxies.setCertificateMap\r\ncompute.targetHttpsProxies.setQuicOverride\r\ncompute.targetHttpsProxies.setSslCertificates\r\ncompute.targetHttpsProxies.setSslPolicy\r\ncompute.targetHttpsProxies.setUrlMap\r\ncompute.targetHttpsProxies.update\r\ncompute.targetHttpsProxies.use\r\nhttps://cloud.google.com/kubernetes-engine/docs/how-to/iam\r\nPage 30 of 57\n\ncompute.targetInstances.*\r\ncompute.targetInstances.create\r\ncompute.targetInstances.createTagBinding\r\ncompute.targetInstances.delete\r\ncompute.targetInstances.deleteTagBinding\r\ncompute.targetInstances.get\r\ncompute.targetInstances.list\r\ncompute.targetInstances.listEffectiveTags\r\ncompute.targetInstances.listTagBindings\r\ncompute.targetInstances.setSecurityPolicy\r\ncompute.targetInstances.use\r\ncompute.targetPools.*\r\ncompute.targetPools.addHealthCheck\r\ncompute.targetPools.addInstance\r\ncompute.targetPools.create\r\ncompute.targetPools.createTagBinding\r\ncompute.targetPools.delete\r\ncompute.targetPools.deleteTagBinding\r\ncompute.targetPools.get\r\ncompute.targetPools.list\r\ncompute.targetPools.listEffectiveTags\r\ncompute.targetPools.listTagBindings\r\ncompute.targetPools.removeHealthCheck\r\ncompute.targetPools.removeInstance\r\ncompute.targetPools.setSecurityPolicy\r\ncompute.targetPools.update\r\ncompute.targetPools.use\r\ncompute.targetSslProxies.*\r\ncompute.targetSslProxies.create\r\ncompute.targetSslProxies.createTagBinding\r\ncompute.targetSslProxies.delete\r\ncompute.targetSslProxies.deleteTagBinding\r\ncompute.targetSslProxies.get\r\ncompute.targetSslProxies.list\r\ncompute.targetSslProxies.listEffectiveTags\r\ncompute.targetSslProxies.listTagBindings\r\ncompute.targetSslProxies.setBackendService\r\ncompute.targetSslProxies.setCertificateMap\r\ncompute.targetSslProxies.setProxyHeader\r\nhttps://cloud.google.com/kubernetes-engine/docs/how-to/iam\r\nPage 31 of 57\n\ncompute.targetSslProxies.setSslCertificates\r\ncompute.targetSslProxies.setSslPolicy\r\ncompute.targetSslProxies.update\r\ncompute.targetSslProxies.use\r\ncompute.targetTcpProxies.*\r\ncompute.targetTcpProxies.attach\r\ncompute.targetTcpProxies.create\r\ncompute.targetTcpProxies.createTagBinding\r\ncompute.targetTcpProxies.delete\r\ncompute.targetTcpProxies.deleteTagBinding\r\ncompute.targetTcpProxies.get\r\ncompute.targetTcpProxies.list\r\ncompute.targetTcpProxies.listEffectiveTags\r\ncompute.targetTcpProxies.listTagBindings\r\ncompute.targetTcpProxies.update\r\ncompute.targetTcpProxies.use\r\ncompute.targetVpnGateways.*\r\ncompute.targetVpnGateways.create\r\ncompute.targetVpnGateways.createTagBinding\r\ncompute.targetVpnGateways.delete\r\ncompute.targetVpnGateways.deleteTagBinding\r\ncompute.targetVpnGateways.get\r\ncompute.targetVpnGateways.list\r\ncompute.targetVpnGateways.listEffectiveTags\r\ncompute.targetVpnGateways.listTagBindings\r\ncompute.targetVpnGateways.setLabels\r\ncompute.targetVpnGateways.use\r\ncompute.urlMaps.*\r\ncompute.urlMaps.create\r\ncompute.urlMaps.createTagBinding\r\ncompute.urlMaps.delete\r\ncompute.urlMaps.deleteTagBinding\r\ncompute.urlMaps.get\r\ncompute.urlMaps.invalidateCache\r\ncompute.urlMaps.list\r\ncompute.urlMaps.listEffectiveTags\r\ncompute.urlMaps.listTagBindings\r\ncompute.urlMaps.update\r\nhttps://cloud.google.com/kubernetes-engine/docs/how-to/iam\r\nPage 32 of 57\n\ncompute.urlMaps.use\r\ncompute.urlMaps.validate\r\ncompute.vpnGateways.*\r\ncompute.vpnGateways.create\r\ncompute.vpnGateways.createTagBinding\r\ncompute.vpnGateways.delete\r\ncompute.vpnGateways.deleteTagBinding\r\ncompute.vpnGateways.get\r\ncompute.vpnGateways.list\r\ncompute.vpnGateways.listEffectiveTags\r\ncompute.vpnGateways.listTagBindings\r\ncompute.vpnGateways.setLabels\r\ncompute.vpnGateways.use\r\ncompute.vpnTunnels.*\r\ncompute.vpnTunnels.create\r\ncompute.vpnTunnels.createTagBinding\r\ncompute.vpnTunnels.delete\r\ncompute.vpnTunnels.deleteTagBinding\r\ncompute.vpnTunnels.get\r\ncompute.vpnTunnels.list\r\ncompute.vpnTunnels.listEffectiveTags\r\ncompute.vpnTunnels.listTagBindings\r\ncompute.vpnTunnels.setLabels\r\ncompute.wireGroups.*\r\ncompute.wireGroups.create\r\ncompute.wireGroups.delete\r\ncompute.wireGroups.get\r\ncompute.wireGroups.list\r\ncompute.wireGroups.update\r\ncompute.zoneOperations.get\r\ncompute.zoneOperations.list\r\ncompute.zones.*\r\ncompute.zones.get\r\ncompute.zones.list\r\nhttps://cloud.google.com/kubernetes-engine/docs/how-to/iam\r\nPage 33 of 57\n\ncontainer.*\r\ncontainer.apiServices.create\r\ncontainer.apiServices.delete\r\ncontainer.apiServices.get\r\ncontainer.apiServices.getStatus\r\ncontainer.apiServices.list\r\ncontainer.apiServices.update\r\ncontainer.apiServices.updateStatus\r\ncontainer.auditSinks.create\r\ncontainer.auditSinks.delete\r\ncontainer.auditSinks.get\r\ncontainer.auditSinks.list\r\ncontainer.auditSinks.update\r\ncontainer.backendConfigs.create\r\ncontainer.backendConfigs.delete\r\ncontainer.backendConfigs.get\r\ncontainer.backendConfigs.list\r\ncontainer.backendConfigs.update\r\ncontainer.bindings.create\r\ncontainer.bindings.delete\r\ncontainer.bindings.get\r\ncontainer.bindings.list\r\ncontainer.bindings.update\r\ncontainer.certificateSigningRequests.approve\r\ncontainer.certificateSigningRequests.create\r\ncontainer.certificateSigningRequests.delete\r\ncontainer.certificateSigningRequests.get\r\ncontainer.certificateSigningRequests.getStatus\r\ncontainer.certificateSigningRequests.list\r\ncontainer.certificateSigningRequests.update\r\ncontainer.certificateSigningRequests.updateStatus\r\ncontainer.clusterRoleBindings.create\r\ncontainer.clusterRoleBindings.delete\r\ncontainer.clusterRoleBindings.get\r\ncontainer.clusterRoleBindings.list\r\ncontainer.clusterRoleBindings.update\r\ncontainer.clusterRoles.bind\r\ncontainer.clusterRoles.create\r\ncontainer.clusterRoles.delete\r\ncontainer.clusterRoles.escalate\r\ncontainer.clusterRoles.get\r\ncontainer.clusterRoles.list\r\nhttps://cloud.google.com/kubernetes-engine/docs/how-to/iam\r\nPage 34 of 57\n\ncontainer.clusterRoles.update\r\ncontainer.clusters.connect\r\ncontainer.clusters.create\r\ncontainer.clusters.createTagBinding\r\ncontainer.clusters.delete\r\ncontainer.clusters.deleteTagBinding\r\ncontainer.clusters.get\r\ncontainer.clusters.getCredentials\r\ncontainer.clusters.impersonate\r\ncontainer.clusters.list\r\ncontainer.clusters.listEffectiveTags\r\ncontainer.clusters.listTagBindings\r\ncontainer.clusters.update\r\ncontainer.componentStatuses.get\r\ncontainer.componentStatuses.list\r\ncontainer.configMaps.create\r\ncontainer.configMaps.delete\r\ncontainer.configMaps.get\r\ncontainer.configMaps.list\r\ncontainer.configMaps.update\r\ncontainer.controllerRevisions.create\r\ncontainer.controllerRevisions.delete\r\ncontainer.controllerRevisions.get\r\ncontainer.controllerRevisions.list\r\ncontainer.controllerRevisions.update\r\ncontainer.cronJobs.create\r\ncontainer.cronJobs.delete\r\ncontainer.cronJobs.get\r\ncontainer.cronJobs.getStatus\r\ncontainer.cronJobs.list\r\ncontainer.cronJobs.update\r\ncontainer.cronJobs.updateStatus\r\ncontainer.csiDrivers.create\r\ncontainer.csiDrivers.delete\r\ncontainer.csiDrivers.get\r\ncontainer.csiDrivers.list\r\ncontainer.csiDrivers.update\r\ncontainer.csiNodeInfos.create\r\ncontainer.csiNodeInfos.delete\r\ncontainer.csiNodeInfos.get\r\ncontainer.csiNodeInfos.list\r\ncontainer.csiNodeInfos.update\r\nhttps://cloud.google.com/kubernetes-engine/docs/how-to/iam\r\nPage 35 of 57\n\ncontainer.csiNodes.create\r\ncontainer.csiNodes.delete\r\ncontainer.csiNodes.get\r\ncontainer.csiNodes.list\r\ncontainer.csiNodes.update\r\ncontainer.customResourceDefinitions.create\r\ncontainer.customResourceDefinitions.delete\r\ncontainer.customResourceDefinitions.get\r\ncontainer.customResourceDefinitions.getStatus\r\ncontainer.customResourceDefinitions.list\r\ncontainer.customResourceDefinitions.update\r\ncontainer.customResourceDefinitions.updateStatus\r\ncontainer.daemonSets.create\r\ncontainer.daemonSets.delete\r\ncontainer.daemonSets.get\r\ncontainer.daemonSets.getStatus\r\ncontainer.daemonSets.list\r\ncontainer.daemonSets.update\r\ncontainer.daemonSets.updateStatus\r\ncontainer.deployments.create\r\ncontainer.deployments.delete\r\ncontainer.deployments.get\r\ncontainer.deployments.getScale\r\ncontainer.deployments.getStatus\r\ncontainer.deployments.list\r\ncontainer.deployments.rollback\r\ncontainer.deployments.update\r\ncontainer.deployments.updateScale\r\ncontainer.deployments.updateStatus\r\ncontainer.endpointSlices.create\r\ncontainer.endpointSlices.delete\r\ncontainer.endpointSlices.get\r\ncontainer.endpointSlices.list\r\ncontainer.endpointSlices.update\r\ncontainer.endpoints.create\r\ncontainer.endpoints.delete\r\ncontainer.endpoints.get\r\ncontainer.endpoints.list\r\ncontainer.endpoints.update\r\ncontainer.events.create\r\ncontainer.events.delete\r\ncontainer.events.get\r\nhttps://cloud.google.com/kubernetes-engine/docs/how-to/iam\r\nPage 36 of 57\n\ncontainer.events.list\r\ncontainer.events.update\r\ncontainer.frontendConfigs.create\r\ncontainer.frontendConfigs.delete\r\ncontainer.frontendConfigs.get\r\ncontainer.frontendConfigs.list\r\ncontainer.frontendConfigs.update\r\ncontainer.horizontalPodAutoscalers.create\r\ncontainer.horizontalPodAutoscalers.delete\r\ncontainer.horizontalPodAutoscalers.get\r\ncontainer.horizontalPodAutoscalers.getStatus\r\ncontainer.horizontalPodAutoscalers.list\r\ncontainer.horizontalPodAutoscalers.update\r\ncontainer.horizontalPodAutoscalers.updateStatus\r\ncontainer.hostServiceAgent.use\r\ncontainer.ingresses.create\r\ncontainer.ingresses.delete\r\ncontainer.ingresses.get\r\ncontainer.ingresses.getStatus\r\ncontainer.ingresses.list\r\ncontainer.ingresses.update\r\ncontainer.ingresses.updateStatus\r\ncontainer.initializerConfigurations.create\r\ncontainer.initializerConfigurations.delete\r\ncontainer.initializerConfigurations.get\r\ncontainer.initializerConfigurations.list\r\ncontainer.initializerConfigurations.update\r\ncontainer.jobs.create\r\ncontainer.jobs.delete\r\ncontainer.jobs.get\r\ncontainer.jobs.getStatus\r\ncontainer.jobs.list\r\ncontainer.jobs.update\r\ncontainer.jobs.updateStatus\r\ncontainer.leases.create\r\ncontainer.leases.delete\r\ncontainer.leases.get\r\ncontainer.leases.list\r\ncontainer.leases.update\r\ncontainer.limitRanges.create\r\ncontainer.limitRanges.delete\r\ncontainer.limitRanges.get\r\nhttps://cloud.google.com/kubernetes-engine/docs/how-to/iam\r\nPage 37 of 57\n\ncontainer.limitRanges.list\r\ncontainer.limitRanges.update\r\ncontainer.localSubjectAccessReviews.create\r\ncontainer.localSubjectAccessReviews.list\r\ncontainer.managedCertificates.create\r\ncontainer.managedCertificates.delete\r\ncontainer.managedCertificates.get\r\ncontainer.managedCertificates.list\r\ncontainer.managedCertificates.update\r\ncontainer.mutatingWebhookConfigurations.create\r\ncontainer.mutatingWebhookConfigurations.delete\r\ncontainer.mutatingWebhookConfigurations.get\r\ncontainer.mutatingWebhookConfigurations.list\r\ncontainer.mutatingWebhookConfigurations.update\r\ncontainer.namespaces.create\r\ncontainer.namespaces.delete\r\ncontainer.namespaces.finalize\r\ncontainer.namespaces.get\r\ncontainer.namespaces.getStatus\r\ncontainer.namespaces.list\r\ncontainer.namespaces.update\r\ncontainer.namespaces.updateStatus\r\ncontainer.networkPolicies.create\r\ncontainer.networkPolicies.delete\r\ncontainer.networkPolicies.get\r\ncontainer.networkPolicies.list\r\ncontainer.networkPolicies.update\r\ncontainer.nodes.create\r\ncontainer.nodes.delete\r\ncontainer.nodes.get\r\ncontainer.nodes.getStatus\r\ncontainer.nodes.list\r\ncontainer.nodes.proxy\r\ncontainer.nodes.update\r\ncontainer.nodes.updateStatus\r\ncontainer.operations.get\r\ncontainer.operations.list\r\ncontainer.persistentVolumeClaims.create\r\ncontainer.persistentVolumeClaims.delete\r\ncontainer.persistentVolumeClaims.get\r\ncontainer.persistentVolumeClaims.getStatus\r\ncontainer.persistentVolumeClaims.list\r\nhttps://cloud.google.com/kubernetes-engine/docs/how-to/iam\r\nPage 38 of 57\n\ncontainer.persistentVolumeClaims.update\r\ncontainer.persistentVolumeClaims.updateStatus\r\ncontainer.persistentVolumes.create\r\ncontainer.persistentVolumes.delete\r\ncontainer.persistentVolumes.get\r\ncontainer.persistentVolumes.getStatus\r\ncontainer.persistentVolumes.list\r\ncontainer.persistentVolumes.update\r\ncontainer.persistentVolumes.updateStatus\r\ncontainer.petSets.create\r\ncontainer.petSets.delete\r\ncontainer.petSets.get\r\ncontainer.petSets.list\r\ncontainer.petSets.update\r\ncontainer.petSets.updateStatus\r\ncontainer.podDisruptionBudgets.create\r\ncontainer.podDisruptionBudgets.delete\r\ncontainer.podDisruptionBudgets.get\r\ncontainer.podDisruptionBudgets.getStatus\r\ncontainer.podDisruptionBudgets.list\r\ncontainer.podDisruptionBudgets.update\r\ncontainer.podDisruptionBudgets.updateStatus\r\ncontainer.podPresets.create\r\ncontainer.podPresets.delete\r\ncontainer.podPresets.get\r\ncontainer.podPresets.list\r\ncontainer.podPresets.update\r\ncontainer.podSecurityPolicies.create\r\ncontainer.podSecurityPolicies.delete\r\ncontainer.podSecurityPolicies.get\r\ncontainer.podSecurityPolicies.list\r\ncontainer.podSecurityPolicies.update\r\ncontainer.podSecurityPolicies.use\r\ncontainer.podTemplates.create\r\ncontainer.podTemplates.delete\r\ncontainer.podTemplates.get\r\ncontainer.podTemplates.list\r\ncontainer.podTemplates.update\r\ncontainer.pods.attach\r\ncontainer.pods.create\r\ncontainer.pods.delete\r\ncontainer.pods.evict\r\nhttps://cloud.google.com/kubernetes-engine/docs/how-to/iam\r\nPage 39 of 57\n\ncontainer.pods.exec\r\ncontainer.pods.get\r\ncontainer.pods.getLogs\r\ncontainer.pods.getStatus\r\ncontainer.pods.initialize\r\ncontainer.pods.list\r\ncontainer.pods.portForward\r\ncontainer.pods.proxy\r\ncontainer.pods.update\r\ncontainer.pods.updateStatus\r\ncontainer.priorityClasses.create\r\ncontainer.priorityClasses.delete\r\ncontainer.priorityClasses.get\r\ncontainer.priorityClasses.list\r\ncontainer.priorityClasses.update\r\ncontainer.replicaSets.create\r\ncontainer.replicaSets.delete\r\ncontainer.replicaSets.get\r\ncontainer.replicaSets.getScale\r\ncontainer.replicaSets.getStatus\r\ncontainer.replicaSets.list\r\ncontainer.replicaSets.update\r\ncontainer.replicaSets.updateScale\r\ncontainer.replicaSets.updateStatus\r\ncontainer.replicationControllers.create\r\ncontainer.replicationControllers.delete\r\ncontainer.replicationControllers.get\r\ncontainer.replicationControllers.getScale\r\ncontainer.replicationControllers.getStatus\r\ncontainer.replicationControllers.list\r\ncontainer.replicationControllers.update\r\ncontainer.replicationControllers.updateScale\r\ncontainer.replicationControllers.updateStatus\r\ncontainer.resourceQuotas.create\r\ncontainer.resourceQuotas.delete\r\ncontainer.resourceQuotas.get\r\ncontainer.resourceQuotas.getStatus\r\ncontainer.resourceQuotas.list\r\ncontainer.resourceQuotas.update\r\ncontainer.resourceQuotas.updateStatus\r\ncontainer.roleBindings.create\r\ncontainer.roleBindings.delete\r\nhttps://cloud.google.com/kubernetes-engine/docs/how-to/iam\r\nPage 40 of 57\n\ncontainer.roleBindings.get\r\ncontainer.roleBindings.list\r\ncontainer.roleBindings.update\r\ncontainer.roles.bind\r\ncontainer.roles.create\r\ncontainer.roles.delete\r\ncontainer.roles.escalate\r\ncontainer.roles.get\r\ncontainer.roles.list\r\ncontainer.roles.update\r\ncontainer.runtimeClasses.create\r\ncontainer.runtimeClasses.delete\r\ncontainer.runtimeClasses.get\r\ncontainer.runtimeClasses.list\r\ncontainer.runtimeClasses.update\r\ncontainer.scheduledJobs.create\r\ncontainer.scheduledJobs.delete\r\ncontainer.scheduledJobs.get\r\ncontainer.scheduledJobs.list\r\ncontainer.scheduledJobs.update\r\ncontainer.scheduledJobs.updateStatus\r\ncontainer.secrets.create\r\ncontainer.secrets.delete\r\ncontainer.secrets.get\r\ncontainer.secrets.list\r\ncontainer.secrets.update\r\ncontainer.selfSubjectAccessReviews.create\r\ncontainer.selfSubjectAccessReviews.list\r\ncontainer.selfSubjectRulesReviews.create\r\ncontainer.serviceAccounts.create\r\ncontainer.serviceAccounts.createToken\r\ncontainer.serviceAccounts.delete\r\ncontainer.serviceAccounts.get\r\ncontainer.serviceAccounts.list\r\ncontainer.serviceAccounts.update\r\ncontainer.services.create\r\ncontainer.services.delete\r\ncontainer.services.get\r\ncontainer.services.getStatus\r\ncontainer.services.list\r\ncontainer.services.proxy\r\ncontainer.services.update\r\nhttps://cloud.google.com/kubernetes-engine/docs/how-to/iam\r\nPage 41 of 57\n\ncontainer.services.updateStatus\r\ncontainer.statefulSets.create\r\ncontainer.statefulSets.delete\r\ncontainer.statefulSets.get\r\ncontainer.statefulSets.getScale\r\ncontainer.statefulSets.getStatus\r\ncontainer.statefulSets.list\r\ncontainer.statefulSets.update\r\ncontainer.statefulSets.updateScale\r\ncontainer.statefulSets.updateStatus\r\ncontainer.storageClasses.create\r\ncontainer.storageClasses.delete\r\ncontainer.storageClasses.get\r\ncontainer.storageClasses.list\r\ncontainer.storageClasses.update\r\ncontainer.storageStates.create\r\ncontainer.storageStates.delete\r\ncontainer.storageStates.get\r\ncontainer.storageStates.getStatus\r\ncontainer.storageStates.list\r\ncontainer.storageStates.update\r\ncontainer.storageStates.updateStatus\r\ncontainer.storageVersionMigrations.create\r\ncontainer.storageVersionMigrations.delete\r\ncontainer.storageVersionMigrations.get\r\ncontainer.storageVersionMigrations.getStatus\r\ncontainer.storageVersionMigrations.list\r\ncontainer.storageVersionMigrations.update\r\ncontainer.storageVersionMigrations.updateStatus\r\ncontainer.subjectAccessReviews.create\r\ncontainer.subjectAccessReviews.list\r\ncontainer.thirdPartyObjects.create\r\ncontainer.thirdPartyObjects.delete\r\ncontainer.thirdPartyObjects.get\r\ncontainer.thirdPartyObjects.list\r\ncontainer.thirdPartyObjects.update\r\ncontainer.thirdPartyResources.create\r\ncontainer.thirdPartyResources.delete\r\ncontainer.thirdPartyResources.get\r\ncontainer.thirdPartyResources.list\r\ncontainer.thirdPartyResources.update\r\ncontainer.tokenReviews.create\r\nhttps://cloud.google.com/kubernetes-engine/docs/how-to/iam\r\nPage 42 of 57\n\ncontainer.updateInfos.create\r\ncontainer.updateInfos.delete\r\ncontainer.updateInfos.get\r\ncontainer.updateInfos.list\r\ncontainer.updateInfos.update\r\ncontainer.validatingWebhookConfigurations.create\r\ncontainer.validatingWebhookConfigurations.delete\r\ncontainer.validatingWebhookConfigurations.get\r\ncontainer.validatingWebhookConfigurations.list\r\ncontainer.validatingWebhookConfigurations.update\r\ncontainer.volumeAttachments.create\r\ncontainer.volumeAttachments.delete\r\ncontainer.volumeAttachments.get\r\ncontainer.volumeAttachments.getStatus\r\ncontainer.volumeAttachments.list\r\ncontainer.volumeAttachments.update\r\ncontainer.volumeAttachments.updateStatus\r\ncontainer.volumeSnapshotClasses.create\r\ncontainer.volumeSnapshotClasses.delete\r\ncontainer.volumeSnapshotClasses.get\r\ncontainer.volumeSnapshotClasses.list\r\ncontainer.volumeSnapshotClasses.update\r\ncontainer.volumeSnapshotContents.create\r\ncontainer.volumeSnapshotContents.delete\r\ncontainer.volumeSnapshotContents.get\r\ncontainer.volumeSnapshotContents.getStatus\r\ncontainer.volumeSnapshotContents.list\r\ncontainer.volumeSnapshotContents.update\r\ncontainer.volumeSnapshotContents.updateStatus\r\ncontainer.volumeSnapshots.create\r\ncontainer.volumeSnapshots.delete\r\ncontainer.volumeSnapshots.get\r\ncontainer.volumeSnapshots.getStatus\r\ncontainer.volumeSnapshots.list\r\ncontainer.volumeSnapshots.update\r\ncontainer.volumeSnapshots.updateStatus\r\ndns.changes.*\r\nhttps://cloud.google.com/kubernetes-engine/docs/how-to/iam\r\nPage 43 of 57\n\ndns.changes.create\r\ndns.changes.get\r\ndns.changes.list\r\ndns.dnsKeys.*\r\ndns.dnsKeys.get\r\ndns.dnsKeys.list\r\ndns.gkeClusters.*\r\ndns.gkeClusters.bindDNSResponsePolicy\r\ndns.gkeClusters.bindPrivateDNSZone\r\ndns.managedZoneOperations.*\r\ndns.managedZoneOperations.get\r\ndns.managedZoneOperations.list\r\ndns.managedZones.create\r\ndns.managedZones.delete\r\ndns.managedZones.get\r\ndns.managedZones.getIamPolicy\r\ndns.managedZones.list\r\ndns.managedZones.update\r\ndns.networks.*\r\ndns.networks.bindDNSResponsePolicy\r\ndns.networks.bindPrivateDNSPolicy\r\ndns.networks.bindPrivateDNSZone\r\ndns.networks.targetWithPeeringZone\r\ndns.networks.useHealthSignals\r\ndns.policies.*\r\ndns.policies.create\r\ndns.policies.createTagBinding\r\ndns.policies.delete\r\ndns.policies.deleteTagBinding\r\ndns.policies.get\r\ndns.policies.list\r\ndns.policies.listEffectiveTags\r\nhttps://cloud.google.com/kubernetes-engine/docs/how-to/iam\r\nPage 44 of 57\n\ndns.policies.listTagBindings\r\ndns.policies.update\r\ndns.projects.get\r\ndns.resourceRecordSets.*\r\ndns.resourceRecordSets.create\r\ndns.resourceRecordSets.delete\r\ndns.resourceRecordSets.get\r\ndns.resourceRecordSets.list\r\ndns.resourceRecordSets.update\r\ndns.responsePolicies.*\r\ndns.responsePolicies.create\r\ndns.responsePolicies.delete\r\ndns.responsePolicies.get\r\ndns.responsePolicies.list\r\ndns.responsePolicies.update\r\ndns.responsePolicyRules.*\r\ndns.responsePolicyRules.create\r\ndns.responsePolicyRules.delete\r\ndns.responsePolicyRules.get\r\ndns.responsePolicyRules.list\r\ndns.responsePolicyRules.update\r\nfile.*\r\nfile.backups.create\r\nfile.backups.createTagBinding\r\nfile.backups.delete\r\nfile.backups.deleteTagBinding\r\nfile.backups.get\r\nfile.backups.list\r\nfile.backups.listEffectiveTags\r\nfile.backups.listTagBindings\r\nfile.backups.update\r\nfile.backups.useReadOnly\r\nfile.instances.create\r\nfile.instances.createCrossProjectBackup\r\nfile.instances.createTagBinding\r\nfile.instances.delete\r\nfile.instances.deleteTagBinding\r\nhttps://cloud.google.com/kubernetes-engine/docs/how-to/iam\r\nPage 45 of 57\n\nfile.instances.get\r\nfile.instances.list\r\nfile.instances.listEffectiveTags\r\nfile.instances.listTagBindings\r\nfile.instances.restore\r\nfile.instances.revert\r\nfile.instances.update\r\nfile.locations.get\r\nfile.locations.list\r\nfile.operations.cancel\r\nfile.operations.delete\r\nfile.operations.get\r\nfile.operations.list\r\nfile.snapshots.createTagBinding\r\nfile.snapshots.deleteTagBinding\r\nfile.snapshots.listEffectiveTags\r\nfile.snapshots.listTagBindings\r\niam.serviceAccounts.actAs\r\niam.serviceAccounts.get\r\nlogging.logEntries.create\r\nlustre.instances.create\r\nlustre.instances.delete\r\nlustre.instances.get\r\nlustre.instances.importData\r\nlustre.instances.list\r\nlustre.instances.update\r\nhttps://cloud.google.com/kubernetes-engine/docs/how-to/iam\r\nPage 46 of 57\n\nlustre.locations.*\r\nlustre.locations.get\r\nlustre.locations.list\r\nlustre.operations.*\r\nlustre.operations.cancel\r\nlustre.operations.delete\r\nlustre.operations.get\r\nlustre.operations.list\r\nmonitoring.metricDescriptors.create\r\nmonitoring.metricDescriptors.get\r\nmonitoring.metricDescriptors.list\r\nmonitoring.timeSeries.*\r\nmonitoring.timeSeries.create\r\nmonitoring.timeSeries.list\r\nnetworkconnectivity.internalRanges.*\r\nnetworkconnectivity.internalRanges.create\r\nnetworkconnectivity.internalRanges.delete\r\nnetworkconnectivity.internalRanges.get\r\nnetworkconnectivity.internalRanges.getIamPolicy\r\nnetworkconnectivity.internalRanges.list\r\nnetworkconnectivity.internalRanges.setIamPolicy\r\nnetworkconnectivity.internalRanges.update\r\nnetworkconnectivity.locations.*\r\nnetworkconnectivity.locations.get\r\nnetworkconnectivity.locations.list\r\nnetworkconnectivity.operations.*\r\nnetworkconnectivity.operations.cancel\r\nnetworkconnectivity.operations.delete\r\nnetworkconnectivity.operations.get\r\nnetworkconnectivity.operations.list\r\nnetworkconnectivity.policyBasedRoutes.*\r\nnetworkconnectivity.policyBasedRoutes.create\r\nhttps://cloud.google.com/kubernetes-engine/docs/how-to/iam\r\nPage 47 of 57\n\nnetworkconnectivity.policyBasedRoutes.delete\r\nnetworkconnectivity.policyBasedRoutes.get\r\nnetworkconnectivity.policyBasedRoutes.getIamPolicy\r\nnetworkconnectivity.policyBasedRoutes.list\r\nnetworkconnectivity.policyBasedRoutes.setIamPolicy\r\nnetworkconnectivity.regionalEndpoints.*\r\nnetworkconnectivity.regionalEndpoints.create\r\nnetworkconnectivity.regionalEndpoints.delete\r\nnetworkconnectivity.regionalEndpoints.get\r\nnetworkconnectivity.regionalEndpoints.list\r\nnetworkconnectivity.serviceClasses.*\r\nnetworkconnectivity.serviceClasses.create\r\nnetworkconnectivity.serviceClasses.delete\r\nnetworkconnectivity.serviceClasses.get\r\nnetworkconnectivity.serviceClasses.list\r\nnetworkconnectivity.serviceClasses.update\r\nnetworkconnectivity.serviceClasses.use\r\nnetworkconnectivity.serviceConnectionMaps.*\r\nnetworkconnectivity.serviceConnectionMaps.create\r\nnetworkconnectivity.serviceConnectionMaps.delete\r\nnetworkconnectivity.serviceConnectionMaps.get\r\nnetworkconnectivity.serviceConnectionMaps.list\r\nnetworkconnectivity.serviceConnectionMaps.update\r\nnetworkconnectivity.serviceConnectionPolicies.*\r\nnetworkconnectivity.serviceConnectionPolicies.create\r\nnetworkconnectivity.serviceConnectionPolicies.delete\r\nnetworkconnectivity.serviceConnectionPolicies.get\r\nnetworkconnectivity.serviceConnectionPolicies.list\r\nnetworkconnectivity.serviceConnectionPolicies.update\r\nnetworkmanagement.connectivitytests.get\r\nnetworkmanagement.connectivitytests.list\r\nnetworksecurity.addressGroups.*\r\nnetworksecurity.addressGroups.create\r\nnetworksecurity.addressGroups.delete\r\nnetworksecurity.addressGroups.get\r\nhttps://cloud.google.com/kubernetes-engine/docs/how-to/iam\r\nPage 48 of 57\n\nnetworksecurity.addressGroups.getIamPolicy\r\nnetworksecurity.addressGroups.list\r\nnetworksecurity.addressGroups.setIamPolicy\r\nnetworksecurity.addressGroups.update\r\nnetworksecurity.addressGroups.use\r\nnetworksecurity.authorizationPolicies.*\r\nnetworksecurity.authorizationPolicies.create\r\nnetworksecurity.authorizationPolicies.delete\r\nnetworksecurity.authorizationPolicies.get\r\nnetworksecurity.authorizationPolicies.getIamPolicy\r\nnetworksecurity.authorizationPolicies.list\r\nnetworksecurity.authorizationPolicies.setIamPolicy\r\nnetworksecurity.authorizationPolicies.update\r\nnetworksecurity.authorizationPolicies.use\r\nnetworksecurity.authzPolicies.*\r\nnetworksecurity.authzPolicies.create\r\nnetworksecurity.authzPolicies.delete\r\nnetworksecurity.authzPolicies.get\r\nnetworksecurity.authzPolicies.getIamPolicy\r\nnetworksecurity.authzPolicies.list\r\nnetworksecurity.authzPolicies.setIamPolicy\r\nnetworksecurity.authzPolicies.update\r\nnetworksecurity.backendAuthenticationConfigs.*\r\nnetworksecurity.backendAuthenticationConfigs.create\r\nnetworksecurity.backendAuthenticationConfigs.delete\r\nnetworksecurity.backendAuthenticationConfigs.get\r\nnetworksecurity.backendAuthenticationConfigs.list\r\nnetworksecurity.backendAuthenticationConfigs.update\r\nnetworksecurity.backendAuthenticationConfigs.use\r\nnetworksecurity.clientTlsPolicies.*\r\nnetworksecurity.clientTlsPolicies.create\r\nnetworksecurity.clientTlsPolicies.delete\r\nnetworksecurity.clientTlsPolicies.get\r\nnetworksecurity.clientTlsPolicies.getIamPolicy\r\nnetworksecurity.clientTlsPolicies.list\r\nnetworksecurity.clientTlsPolicies.setIamPolicy\r\nnetworksecurity.clientTlsPolicies.update\r\nhttps://cloud.google.com/kubernetes-engine/docs/how-to/iam\r\nPage 49 of 57\n\nnetworksecurity.clientTlsPolicies.use\r\nnetworksecurity.firewallEndpointAssociations.*\r\nnetworksecurity.firewallEndpointAssociations.create\r\nnetworksecurity.firewallEndpointAssociations.delete\r\nnetworksecurity.firewallEndpointAssociations.get\r\nnetworksecurity.firewallEndpointAssociations.list\r\nnetworksecurity.firewallEndpointAssociations.update\r\nnetworksecurity.firewallEndpoints.*\r\nnetworksecurity.firewallEndpoints.create\r\nnetworksecurity.firewallEndpoints.delete\r\nnetworksecurity.firewallEndpoints.get\r\nnetworksecurity.firewallEndpoints.list\r\nnetworksecurity.firewallEndpoints.update\r\nnetworksecurity.firewallEndpoints.use\r\nnetworksecurity.gatewaySecurityPolicies.*\r\nnetworksecurity.gatewaySecurityPolicies.create\r\nnetworksecurity.gatewaySecurityPolicies.delete\r\nnetworksecurity.gatewaySecurityPolicies.get\r\nnetworksecurity.gatewaySecurityPolicies.list\r\nnetworksecurity.gatewaySecurityPolicies.update\r\nnetworksecurity.gatewaySecurityPolicies.use\r\nnetworksecurity.gatewaySecurityPolicyRules.*\r\nnetworksecurity.gatewaySecurityPolicyRules.create\r\nnetworksecurity.gatewaySecurityPolicyRules.delete\r\nnetworksecurity.gatewaySecurityPolicyRules.get\r\nnetworksecurity.gatewaySecurityPolicyRules.list\r\nnetworksecurity.gatewaySecurityPolicyRules.update\r\nnetworksecurity.gatewaySecurityPolicyRules.use\r\nnetworksecurity.locations.*\r\nnetworksecurity.locations.get\r\nnetworksecurity.locations.list\r\nnetworksecurity.operations.*\r\nnetworksecurity.operations.cancel\r\nnetworksecurity.operations.delete\r\nnetworksecurity.operations.get\r\nhttps://cloud.google.com/kubernetes-engine/docs/how-to/iam\r\nPage 50 of 57\n\nnetworksecurity.operations.list\r\nnetworksecurity.sacAttachments.*\r\nnetworksecurity.sacAttachments.create\r\nnetworksecurity.sacAttachments.delete\r\nnetworksecurity.sacAttachments.get\r\nnetworksecurity.sacAttachments.list\r\nnetworksecurity.sacRealms.*\r\nnetworksecurity.sacRealms.create\r\nnetworksecurity.sacRealms.delete\r\nnetworksecurity.sacRealms.get\r\nnetworksecurity.sacRealms.list\r\nnetworksecurity.securityProfileGroups.*\r\nnetworksecurity.securityProfileGroups.create\r\nnetworksecurity.securityProfileGroups.delete\r\nnetworksecurity.securityProfileGroups.get\r\nnetworksecurity.securityProfileGroups.list\r\nnetworksecurity.securityProfileGroups.update\r\nnetworksecurity.securityProfileGroups.use\r\nnetworksecurity.securityProfiles.*\r\nnetworksecurity.securityProfiles.create\r\nnetworksecurity.securityProfiles.delete\r\nnetworksecurity.securityProfiles.get\r\nnetworksecurity.securityProfiles.list\r\nnetworksecurity.securityProfiles.update\r\nnetworksecurity.securityProfiles.use\r\nnetworksecurity.serverTlsPolicies.*\r\nnetworksecurity.serverTlsPolicies.create\r\nnetworksecurity.serverTlsPolicies.delete\r\nnetworksecurity.serverTlsPolicies.get\r\nnetworksecurity.serverTlsPolicies.getIamPolicy\r\nnetworksecurity.serverTlsPolicies.list\r\nnetworksecurity.serverTlsPolicies.setIamPolicy\r\nnetworksecurity.serverTlsPolicies.update\r\nnetworksecurity.serverTlsPolicies.use\r\nhttps://cloud.google.com/kubernetes-engine/docs/how-to/iam\r\nPage 51 of 57\n\nnetworksecurity.tlsInspectionPolicies.*\r\nnetworksecurity.tlsInspectionPolicies.create\r\nnetworksecurity.tlsInspectionPolicies.delete\r\nnetworksecurity.tlsInspectionPolicies.get\r\nnetworksecurity.tlsInspectionPolicies.list\r\nnetworksecurity.tlsInspectionPolicies.update\r\nnetworksecurity.tlsInspectionPolicies.use\r\nnetworksecurity.urlLists.*\r\nnetworksecurity.urlLists.create\r\nnetworksecurity.urlLists.delete\r\nnetworksecurity.urlLists.get\r\nnetworksecurity.urlLists.list\r\nnetworksecurity.urlLists.update\r\nnetworksecurity.urlLists.use\r\nnetworkservices.*\r\nnetworkservices.authzExtensions.create\r\nnetworkservices.authzExtensions.delete\r\nnetworkservices.authzExtensions.get\r\nnetworkservices.authzExtensions.list\r\nnetworkservices.authzExtensions.update\r\nnetworkservices.authzExtensions.use\r\nnetworkservices.endpointPolicies.create\r\nnetworkservices.endpointPolicies.delete\r\nnetworkservices.endpointPolicies.get\r\nnetworkservices.endpointPolicies.list\r\nnetworkservices.endpointPolicies.update\r\nnetworkservices.gateways.create\r\nnetworkservices.gateways.delete\r\nnetworkservices.gateways.get\r\nnetworkservices.gateways.list\r\nnetworkservices.gateways.update\r\nnetworkservices.gateways.use\r\nnetworkservices.grpcRoutes.create\r\nnetworkservices.grpcRoutes.delete\r\nnetworkservices.grpcRoutes.get\r\nnetworkservices.grpcRoutes.list\r\nnetworkservices.grpcRoutes.update\r\nnetworkservices.httpFilters.create\r\nnetworkservices.httpFilters.delete\r\nhttps://cloud.google.com/kubernetes-engine/docs/how-to/iam\r\nPage 52 of 57\n\nnetworkservices.httpFilters.get\r\nnetworkservices.httpFilters.list\r\nnetworkservices.httpFilters.update\r\nnetworkservices.httpRoutes.create\r\nnetworkservices.httpRoutes.delete\r\nnetworkservices.httpRoutes.get\r\nnetworkservices.httpRoutes.list\r\nnetworkservices.httpRoutes.update\r\nnetworkservices.httpfilters.create\r\nnetworkservices.httpfilters.delete\r\nnetworkservices.httpfilters.get\r\nnetworkservices.httpfilters.getIamPolicy\r\nnetworkservices.httpfilters.list\r\nnetworkservices.httpfilters.setIamPolicy\r\nnetworkservices.httpfilters.update\r\nnetworkservices.httpfilters.use\r\nnetworkservices.lbEdgeExtensions.create\r\nnetworkservices.lbEdgeExtensions.delete\r\nnetworkservices.lbEdgeExtensions.get\r\nnetworkservices.lbEdgeExtensions.list\r\nnetworkservices.lbEdgeExtensions.update\r\nnetworkservices.lbRouteExtensions.create\r\nnetworkservices.lbRouteExtensions.delete\r\nnetworkservices.lbRouteExtensions.get\r\nnetworkservices.lbRouteExtensions.list\r\nnetworkservices.lbRouteExtensions.update\r\nnetworkservices.lbTcpExtensions.createForNetwork\r\nnetworkservices.lbTcpExtensions.deleteForNetwork\r\nnetworkservices.lbTcpExtensions.getForNetwork\r\nnetworkservices.lbTcpExtensions.listForNetwork\r\nnetworkservices.lbTcpExtensions.updateForNetwork\r\nnetworkservices.lbTrafficExtensions.create\r\nnetworkservices.lbTrafficExtensions.delete\r\nnetworkservices.lbTrafficExtensions.get\r\nnetworkservices.lbTrafficExtensions.list\r\nnetworkservices.lbTrafficExtensions.update\r\nnetworkservices.locations.get\r\nnetworkservices.locations.list\r\nnetworkservices.meshes.create\r\nnetworkservices.meshes.delete\r\nnetworkservices.meshes.get\r\nnetworkservices.meshes.list\r\nhttps://cloud.google.com/kubernetes-engine/docs/how-to/iam\r\nPage 53 of 57\n\nnetworkservices.meshes.update\r\nnetworkservices.meshes.use\r\nnetworkservices.operations.cancel\r\nnetworkservices.operations.delete\r\nnetworkservices.operations.get\r\nnetworkservices.operations.list\r\nnetworkservices.route_views.get\r\nnetworkservices.route_views.list\r\nnetworkservices.serviceBindings.create\r\nnetworkservices.serviceBindings.delete\r\nnetworkservices.serviceBindings.get\r\nnetworkservices.serviceBindings.list\r\nnetworkservices.serviceBindings.update\r\nnetworkservices.serviceLbPolicies.create\r\nnetworkservices.serviceLbPolicies.delete\r\nnetworkservices.serviceLbPolicies.get\r\nnetworkservices.serviceLbPolicies.list\r\nnetworkservices.serviceLbPolicies.update\r\nnetworkservices.swpSecurityExtensions.create\r\nnetworkservices.swpSecurityExtensions.delete\r\nnetworkservices.swpSecurityExtensions.get\r\nnetworkservices.swpSecurityExtensions.list\r\nnetworkservices.swpSecurityExtensions.update\r\nnetworkservices.tcpRoutes.create\r\nnetworkservices.tcpRoutes.delete\r\nnetworkservices.tcpRoutes.get\r\nnetworkservices.tcpRoutes.list\r\nnetworkservices.tcpRoutes.update\r\nnetworkservices.tlsRoutes.create\r\nnetworkservices.tlsRoutes.delete\r\nnetworkservices.tlsRoutes.get\r\nnetworkservices.tlsRoutes.list\r\nnetworkservices.tlsRoutes.update\r\nnetworkservices.wasmPlugins.create\r\nnetworkservices.wasmPlugins.delete\r\nnetworkservices.wasmPlugins.get\r\nnetworkservices.wasmPlugins.list\r\nnetworkservices.wasmPlugins.update\r\nnetworkservices.wasmPlugins.use\r\nparallelstore.instances.create\r\nparallelstore.instances.delete\r\nhttps://cloud.google.com/kubernetes-engine/docs/how-to/iam\r\nPage 54 of 57\n\nparallelstore.instances.get\r\nparallelstore.instances.importData\r\nparallelstore.instances.list\r\nparallelstore.instances.update\r\nparallelstore.locations.*\r\nparallelstore.locations.get\r\nparallelstore.locations.list\r\nparallelstore.operations.*\r\nparallelstore.operations.cancel\r\nparallelstore.operations.delete\r\nparallelstore.operations.get\r\nparallelstore.operations.list\r\npubsub.topics.create\r\npubsub.topics.get\r\npubsub.topics.publish\r\nrecommender.containerDiagnosisInsights.*\r\nrecommender.containerDiagnosisInsights.get\r\nrecommender.containerDiagnosisInsights.list\r\nrecommender.containerDiagnosisInsights.update\r\nrecommender.containerDiagnosisRecommendations.*\r\nrecommender.containerDiagnosisRecommendations.get\r\nrecommender.containerDiagnosisRecommendations.list\r\nrecommender.containerDiagnosisRecommendations.update\r\nrecommender.locations.*\r\nrecommender.locations.get\r\nrecommender.locations.list\r\nrecommender.networkAnalyzerGkeConnectivityInsights.*\r\nhttps://cloud.google.com/kubernetes-engine/docs/how-to/iam\r\nPage 55 of 57\n\nrecommender.networkAnalyzerGkeConnectivityInsights.get\r\nrecommender.networkAnalyzerGkeConnectivityInsights.list\r\nrecommender.networkAnalyzerGkeConnectivityInsights.update\r\nrecommender.networkAnalyzerGkeIpAddressInsights.*\r\nrecommender.networkAnalyzerGkeIpAddressInsights.get\r\nrecommender.networkAnalyzerGkeIpAddressInsights.list\r\nrecommender.networkAnalyzerGkeIpAddressInsights.update\r\nresourcemanager.projects.get\r\nresourcemanager.projects.list\r\nresourcemanager.tagHolds.*\r\nresourcemanager.tagHolds.create\r\nresourcemanager.tagHolds.delete\r\nresourcemanager.tagHolds.list\r\nresourcemanager.tagValueBindings.create\r\nservicedirectory.namespaces.create\r\nservicedirectory.namespaces.delete\r\nservicedirectory.services.create\r\nservicedirectory.services.delete\r\nservicenetworking.operations.get\r\nservicenetworking.services.addPeering\r\nservicenetworking.services.createPeeredDnsDomain\r\nservicenetworking.services.deleteConnection\r\nservicenetworking.services.deletePeeredDnsDomain\r\nservicenetworking.services.disableVpcServiceControls\r\nservicenetworking.services.enableVpcServiceControls\r\nservicenetworking.services.get\r\nservicenetworking.services.getVpcServiceControls\r\nservicenetworking.services.listPeeredDnsDomains\r\nhttps://cloud.google.com/kubernetes-engine/docs/how-to/iam\r\nPage 56 of 57\n\nserviceusage.consumerpolicy.analyze\r\nserviceusage.consumerpolicy.get\r\nserviceusage.effectivepolicy.get\r\nserviceusage.groups.*\r\nserviceusage.groups.list\r\nserviceusage.groups.listExpandedMembers\r\nserviceusage.groups.listMembers\r\nserviceusage.quotas.get\r\nserviceusage.services.get\r\nserviceusage.services.list\r\nserviceusage.services.use\r\nserviceusage.values.test\r\ntpu.locations.*\r\ntpu.locations.get\r\ntpu.locations.list\r\ntpu.nodes.create\r\ntpu.nodes.delete\r\ntpu.nodes.get\r\ntpu.nodes.list\r\ntpu.operations.*\r\ntpu.operations.get\r\ntpu.operations.list\r\ntrafficdirector.*\r\ntrafficdirector.networks.getConfigs\r\ntrafficdirector.networks.reportMetrics\r\nSource: https://cloud.google.com/kubernetes-engine/docs/how-to/iam\r\nhttps://cloud.google.com/kubernetes-engine/docs/how-to/iam\r\nPage 57 of 57",
	"extraction_quality": 1,
	"language": "EN",
	"sources": [
		"MITRE"
	],
	"references": [
		"https://cloud.google.com/kubernetes-engine/docs/how-to/iam"
	],
	"report_names": [
		"iam"
	],
	"threat_actors": [],
	"ts_created_at": 1775434563,
	"ts_updated_at": 1775791232,
	"ts_creation_date": 0,
	"ts_modification_date": 0,
	"files": {
		"pdf": "https://archive.orkl.eu/81d50bce51ff12358adc4cce5df9fd3af9a35d5e.pdf",
		"text": "https://archive.orkl.eu/81d50bce51ff12358adc4cce5df9fd3af9a35d5e.txt",
		"img": "https://archive.orkl.eu/81d50bce51ff12358adc4cce5df9fd3af9a35d5e.jpg"
	}
}