Live workspace. Durable storage schema active — live connectors, billing, and AI automation are activation-gated.View Activation Status
Signed out
Sign in as the approved QA user before running RLS-bound QA.
Sign in
Back to control matrix
Read-only automation evaluation - no live writes

IAM role risk management

Prevent assignment of dangerous or overly-broad IAM roles (e.g. owner, editor at org level).

Cloud/API Guard
CAG-5
cloud api

Readiness evaluation

Gap
high
Automation rationale
Deterministic explanation from evidence, gaps, and open findings.
No required evidence type is verified at high confidence.
Required evidence
Evidence types expected for this control.
system config
Linked evidence
Sample evidence mapped to this control.

IAM policy export

Exported IAM bindings for review of least-privilege adherence.

Pending review

Confidence: medium · Owner: Sam Okafor

Linked findings
Open or historical findings mapped to this control.
No findings are linked to this control.
Recommended remediation workflow
Preview recommendation only; no workflow instance is created here.

Request missing evidence

Request evidence required to close a control gap. SLA 120h.

Open workflow template
Audit trail placeholder
Future live audit trails will show reviewer decisions, evidence refreshes, and workflow transitions.
Catalog imported: Cloud/API Guard
Last evaluated: May 29, 2026
Mode: local deterministic preview