[IAC_DRIFT_IAM_USER] Action Required: Unauthorized IAM Users Detected

### Compliance Audit Report (2026-09-14 09:15:28 UTC)
Critical security violations detected in IAM policies for project apache-beam-testing:

- IAC_DRIFT_IAM_USER: Unauthorized user 'actuation-a@apache-beam-testing.iam.gserviceaccount.com' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user 'aishwaryshukla@google.com' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user 'ajadiya@nvidia.com' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user 'asampathkumar@google.com' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user 'bob.thomson.devops@gmail.com' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user 'crites@google.com' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user 'elialiulzy@gmail.com' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user 'ismailmehdi@google.com' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user 'jiangzzhu@google.com' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user 'kwolkonowski@google.com' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user 'lacrit@google.com' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user 'mustafasaglam@google.com' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user 'myzh@google.com' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user 'ratelimit-actuation-sa@apache-beam-testing.iam.gserviceaccount.com' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user 'shunping-test@apache-beam-testing.iam.gserviceaccount.com' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user 'tarun-dataflow-custom-sa@apache-beam-testing.iam.gserviceaccount.com' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user 'tarun-local-test@apache-beam-testing.iam.gserviceaccount.com' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user 'viramachandran@google.com' detected in GCP but not found in existing policy.

### History

Click to expand

### Compliance Audit Report (2026-09-07 09:15:46 UTC)
Critical security violations detected in IAM policies for project apache-beam-testing:

- IAC_DRIFT_IAM_USER: Unauthorized user 'actuation-a@apache-beam-testing.iam.gserviceaccount.com' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user 'aishwaryshukla@google.com' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user 'ajadiya@nvidia.com' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user 'asampathkumar@google.com' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user 'bob.thomson.devops@gmail.com' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user 'crites@google.com' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user 'elialiulzy@gmail.com' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user 'ismailmehdi@google.com' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user 'jiangzzhu@google.com' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user 'kwolkonowski@google.com' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user 'lacrit@google.com' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user 'mustafasaglam@google.com' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user 'myzh@google.com' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user 'ratelimit-actuation-sa@apache-beam-testing.iam.gserviceaccount.com' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user 'shunping-test@apache-beam-testing.iam.gserviceaccount.com' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user 'tarun-dataflow-custom-sa@apache-beam-testing.iam.gserviceaccount.com' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user 'tarun-local-test@apache-beam-testing.iam.gserviceaccount.com' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user 'viramachandran@google.com' detected in GCP but not found in existing policy.

---

### Compliance Audit Report (2026-08-31 09:16:06 UTC)
Critical security violations detected in IAM policies for project apache-beam-testing:

- IAC_DRIFT_IAM_USER: Unauthorized user 'actuation-a@apache-beam-testing.iam.gserviceaccount.com' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user 'aishwaryshukla@google.com' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user 'ajadiya@nvidia.com' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user 'asampathkumar@google.com' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user 'bob.thomson.devops@gmail.com' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user 'crites@google.com' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user 'elialiulzy@gmail.com' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user 'ismailmehdi@google.com' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user 'jiangzzhu@google.com' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user 'kwolkonowski@google.com' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user 'lacrit@google.com' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user 'mustafasaglam@google.com' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user 'myzh@google.com' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user 'ratelimit-actuation-sa@apache-beam-testing.iam.gserviceaccount.com' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user 'shunping-test@apache-beam-testing.iam.gserviceaccount.com' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user 'tarun-dataflow-custom-sa@apache-beam-testing.iam.gserviceaccount.com' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user 'tarun-local-test@apache-beam-testing.iam.gserviceaccount.com' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user 'viramachandran@google.com' detected in GCP but not found in existing policy.

---

### Compliance Audit Report (2026-08-24 09:18:42 UTC)
Critical security violations detected in IAM policies for project apache-beam-testing:

- IAC_DRIFT_IAM_USER: Unauthorized user 'actuation-a@apache-beam-testing.iam.gserviceaccount.com' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user 'aishwaryshukla@google.com' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user 'ajadiya@nvidia.com' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user 'asampathkumar@google.com' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user 'bob.thomson.devops@gmail.com' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user 'crites@google.com' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user 'elialiulzy@gmail.com' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user 'ismailmehdi@google.com' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user 'jiangzzhu@google.com' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user 'kwolkonowski@google.com' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user 'lacrit@google.com' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user 'mustafasaglam@google.com' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user 'myzh@google.com' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user 'ratelimit-actuation-sa@apache-beam-testing.iam.gserviceaccount.com' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user 'shunping-test@apache-beam-testing.iam.gserviceaccount.com' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user 'tarun-dataflow-custom-sa@apache-beam-testing.iam.gserviceaccount.com' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user 'tarun-local-test@apache-beam-testing.iam.gserviceaccount.com' detected in GCP but not found in existing policy.
- IAC_DRIFT_IAM_USER: Unauthorized user 'viramachandran@google.com' detected in GCP but not found in existing policy.

The issue identifies unauthorized users in GCP IAM policies for the apache-beam-testing project but names no files, tests, or code entry points. First determine where the compliance audit and existing policy are defined, then establish whether each identity should be removed, authorized, or investigated; done requires resolving the reported drift and confirming a clean audit.

Written by the indexing model from the issue text.