Custodian project-iam-policy

gistfile1.txt

@resources.register('project-iam-policy')
class ProjectIAMRole(QueryResourceManager):
    """GCP resource: https://cloud.google.com/resource-manager/reference/rest/v1/projects/getIamPolicy
    """
    class resource_type(TypeInfo):
        service = 'cloudresourcemanager'
        version = 'v1'
        component = 'projects'

        scope = 'project'
        enum_spec = ('list', 'bindings', None)
        id = 'role'

        scope_key = 'parent'
        scope_template = 'projects/{}'

        @staticmethod
        def get(client, resource_info):
            return client.execute_query(
                'post', verb_arguments={
                    'name': 'projects/{}:getIamPolicy'.format(
                        resource_info['project_id'])})