Policies tagged "rbac"

bigquery · ingress

Fence Regulated BigQuery Datasets by Group

Fences customer-designated regulated BigQuery data domains by data-domain IdP group, at ingress, before any statement or metadata lookup reaches BigQuery.

bigquery fence-sensitive-scopes ingress rbac soc2 hipaa pci-dss gdpr-ccpa

stripe · ingress

Read-Only Stripe by Default (Role-Gate Billing Writes)

Establishes a read-only-by-default Stripe posture over the MCP path. The named write and destructive billing tools —

stripe role-gate-writes ingress least-privilege rbac soc2 pci-dss sox gdpr-ccpa

dropbox · ingress

Role-Gate Dropbox Writes to the Writers Group

Establishes the per-app least-privilege write floor for Dropbox.

dropbox role-gate-writes rbac least-privilege ingress soc2 gdpr-ccpa