gcp-vertexai-explicit-notebook-modify-code-startup
Principal can modify Workbench instance startup or post-startup script via notebooks.instances.update.
match (effective permission)
{
"action": "notebooks.instances.update OR notebooks.instances.updateConfig",
"resource_type": "google.notebooks.Instance"
}
where
Permission scoped to instance-level; startup script and post-startup script fields are modifiable.
emit
| source type | Identity |
|---|---|
| target type | Notebook |
| source | <principal> |
| target | <Workbench notebook instance> |
| permissions | notebooks.instances.update |
| state logic | ACTIVE when notebooks.instances.update is confirmed on the target instance. |
Raw rule rules/explicit/gcp-vertexai.yaml
id: gcp-vertexai-explicit-notebook-modify-code-startup
emits: CanModifyCode
description: Principal can modify Workbench instance startup or post-startup script via notebooks.instances.update.
match_effective_permission:
action: notebooks.instances.update OR notebooks.instances.updateConfig
resource_type: google.notebooks.Instance
where:
- Permission scoped to instance-level; startup script and post-startup script fields are modifiable.
emit:
source_type: Identity
target_type: Notebook
source: <principal>
target: <Workbench notebook instance>
permissions:
- notebooks.instances.update
state_logic: ACTIVE when notebooks.instances.update is confirmed on the target instance.
note: Modifying the startup script / post-startup script is equivalent to injecting code. Feeds the
can-execute-as execute-as-via-code-modify linchpin.