DET-C14: Workload Confidential VM's service account changed¶
setServiceAccount re-pointed the identity the workload VM runs as (the instance token its metadata serves). The attested workload can now reach whatever the new service account can, with no re-attestation.
| Property | Value |
|---|---|
| Severity | high |
| Platform | GCP Confidential Space |
| Group | tee |
| Log source | Cloud Audit Logs · Compute |
| Related check | CSPACE-SA-01: Workload SA cannot be impersonated to bypass attestation |
Fires when¶
compute.instances.setServiceAccount AND instance == workload AND service account changed
How it runs¶
untrust detect --platform sev-snp reads the project's Cloud Audit Logs over the last --since minutes (default 60).
A match is a detection event with this rule's ID. Upload it to the console to alert on it; see Runtime detections.