catalog logoThe IAM Privilege Catalog

risks / Infrastructure consumption

Description

Allows an attacker to consume resources from a potentially limited pool. This may impact the time to assign resources.

Risk: LOW

This risk may assist in additional attacks, or gain access to confidential data that do not create organizational risk on their own.

Mitigations

    (No mitigations for this risk)

Links

    (No links for this risk)

Affected Privileges

An attacker may be able to exploit this risk if they gain any of the following privileges:

Google Cloud Platform

apikeys.keys.create
apikeys.keys.undelete
cloudsql.databases.create
cloudsql.instances.import
cloudsql.sslCerts.create
compute.addresses.create
compute.addresses.createInternal
compute.globalAddresses.create
compute.globalAddresses.createInternal
compute.packetMirrorings.create
compute.packetMirrorings.update
container.pods.evict
datastore.entities.create
datastore.indexes.create
firebase.projects.create
logging.buckets.create
logging.buckets.undelete
logging.views.create
resourcemanager.projects.create
resourcemanager.tagkeys.create
resourcemanager.tagvalues.create

Kubernetes

core/pods.evict
© 2023–present P0 Security and contributors to the IAM Privilege Catalog