change role/viewer to roles/iam.securityReviewer

deepfence · Aug 9, 2022 · bb693e7 · bb693e7
1 parent b471089
commit bb693e7
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/modules/services/container/main.tf b/modules/services/container/main.tf
@@ -100,6 +100,7 @@ resource "google_cloud_run_service_iam_member" "run_invoker" {
 resource "google_project_iam_member" "run_viewer" {
   project = var.project_id
   member  = "serviceAccount:${var.container_sa_email}"
-  role    = "roles/viewer"
+  # role    = "roles/viewer"
+  role = "roles/iam.securityReviewer"
 }