Repository: bridgecrewio/checkov

Issue:
Unable to Load Custom V2 Yaml Checks with --external-checks-dir
Hello Checkov Team,

`checkov==2.0.107`

I'm struggling to load a custom Checkov check in the new `.yaml` format with `--external-checks-dir`.

**What I've done** 
I've copied an existing check (just a POC for myself) and put it into a file `mychecks/S3BucketPublicAccessBlock.yaml`

```yaml
metadata:
  name: "Ensure that S3 bucket has a Public Access block"
  category: "Networking"
  id: "CUSTOM_AWS_6"
definition:
  and:
    - resource_types:
        - aws_s3_bucket
      connected_resource_types:
        - aws_s3_bucket_public_access_block
      operator:  exists
      cond_type: connection
    - cond_type: filter
      attribute: resource_type
      value:
        - aws_s3_bucket
      operator: within
    - cond_type: attribute
      attribute: block_public_acls
      value: true
      operator: equals
      resource_types:
        - aws_s3_bucket_public_access_block
    - cond_type: attribute
      attribute: block_public_policy
      value: true
      operator: equals
      resource_types:
        - aws_s3_bucket_public_access_block
```

When I execute Checkov with `checkov -d /tmp/project --external-checks-dir mychecks` against some example terraform, I don't see the check in my run output. I looked in the code and I think I see the issue:

https://github.com/bridgecrewio/checkov/blob/master/checkov/common/checks/base_check_registry.py#L165 looks for arguments passed to `--external-checks-dir` and loads only those with a `.py`.

**What I expect**
I expect checkov to load both `.py` or `.yaml` checks in the specified `--external-checks-dir` directory. Or have the ability to load the `.yaml` files in a different way.

Is there a separate way to load external `.yaml` files, or does this logic need to be extended to include the new version checks?

Thanks for your help and guidance!
Unable to see any CKV2 checks in the list
**Describe the bug**
I posted this on Slack first and was confirmed it's a bug. I can't see any of the CKV2 checks when running `checkov -l`

**Expected behavior**
CKV2 / graph checks should be present working.

**Screenshots**
![image](https://user-images.githubusercontent.com/42545485/116978125-369c3200-acbb-11eb-9c7e-f9b7bea1118c.png)


**Desktop (please complete the following information):**
 - OS: os X
 - Checkov Version 2.0.107


Discussion:

Patch:
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 72217560e..169caac07 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -21,10 +21,10 @@ jobs:
       - name: Build & install checkov package
         run: |
           pipenv --python ${{ matrix.python }}
+          pipenv run pip install --upgrade pip==21.1.1
           pipenv run pip install pytest
           pipenv run python setup.py sdist bdist_wheel
-          pipenv run pip install --upgrade pip==20.2
-          pipenv run pip install dist/checkov-*
+          pipenv run pip install dist/checkov-*.whl
       - name: Clone Terragoat - vulnerable terraform
         uses: actions/checkout@v2
         with:
diff --git a/Manifest.in b/Manifest.in
new file mode 100644
index 000000000..7d99432ed
--- /dev/null
+++ b/Manifest.in
@@ -0,0 +1,1 @@
+recursive-include checkov/terraform/checks/graph_checks *.yaml *.yml
\ No newline at end of file
diff --git a/checkov/terraform/checks/resource/azure/KeyVaultEnablesFirewallRulesSettings.py b/checkov/terraform/checks/resource/azure/KeyVaultEnablesFirewallRulesSettings.py
index 0c88f3f14..062943fdd 100644
--- a/checkov/terraform/checks/resource/azure/KeyVaultEnablesFirewallRulesSettings.py
+++ b/checkov/terraform/checks/resource/azure/KeyVaultEnablesFirewallRulesSettings.py
@@ -14,7 +14,7 @@ class KeyVaultEnablesFirewallRulesSettings(BaseResourceValueCheck):
         return "network_acls/[0]/default_action"
 
     def get_expected_value(self):
-        return "deny"
+        return "Deny"
 
 
 check = KeyVaultEnablesFirewallRulesSettings()
diff --git a/checkov/terraform/checks_infra/registry.py b/checkov/terraform/checks_infra/registry.py
index 7ae2044c0..e1b2cea23 100644
--- a/checkov/terraform/checks_infra/registry.py
+++ b/checkov/terraform/checks_infra/registry.py
@@ -25,15 +25,20 @@ class Registry(BaseRegistry):
 
     def _load_checks_from_dir(self, directory: str):
         dir = os.path.expanduser(directory)
-        self.logger.debug("Loading external checks from {}".format(dir))
+
+        checks_dir_content = os.listdir(os.path.dirname(dir))
+        self.logger.info(f'Checks dir contents: {checks_dir_content}')
+
+        self.logger.info("Loading external checks from {}".format(dir))
         for root, d_names, f_names in os.walk(dir):
+            self.logger.info(f'Searching through {d_names} and {f_names}')
             for file in f_names:
                 file_ending = os.path.splitext(file)[1]
                 if file_ending in CHECKS_POSSIBLE_ENDING:
                     with open(f'{root}/{file}', "r") as f:
-                        if dir != self.checks_dir:
+                        # if dir != self.checks_dir:
                             # This is a custom check, log its loading
-                            logging.info(f"loading {file}")
+                        self.logger.info(f"loading {file}")
                         check_yaml = yaml.safe_load(f)
                         check_json = json.loads(json.dumps(check_yaml))
                         check = self.parser.parse_raw_check(check_json, resources_types=self._get_resource_types(check_json))
diff --git a/checkov/version.py b/checkov/version.py
index cfe368c30..bce98e13c 100644
--- a/checkov/version.py
+++ b/checkov/version.py
@@ -1,1 +1,1 @@
-version = '2.0.109'
+version = '2.0.111'
diff --git a/docs/4.Integrations/Pre-Commit.md b/docs/4.Integrations/pre-commit.md
similarity index 100%
rename from docs/4.Integrations/Pre-Commit.md
rename to docs/4.Integrations/pre-commit.md
diff --git a/docs/5.Policy Index/all.md b/docs/5.Policy Index/all.md
index 3c8b04ed8..32659e7cb 100644
--- a/docs/5.Policy Index/all.md
+++ b/docs/5.Policy Index/all.md
@@ -287,30 +287,30 @@ nav_order: 1
 |  276 | CKV_AWS_152   | resource   | aws_lb                                                                       | Ensure that Load Balancer (Network/Gateway) has cross-zone load balancing enabled                                                                                                                        | Terraform      |
 |  277 | CKV_AWS_152   | resource   | aws_alb                                                                      | Ensure that Load Balancer (Network/Gateway) has cross-zone load balancing enabled                                                                                                                        | Terraform      |
 |  278 | CKV_AWS_153   | resource   | aws_autoscaling_group                                                        | Autoscaling groups should supply tags to launch configurations                                                                                                                                           | Terraform      |
-|  279 | CKV2_AWS_1    | resource   | aws_network_acl                                                              | Ensure that all NACL are attached to subnets                                                                                                                                                             | Terraform      |
-|  280 | CKV2_AWS_1    | resource   | aws_subnet                                                                   | Ensure that all NACL are attached to subnets                                                                                                                                                             | Terraform      |
+|  279 | CKV2_AWS_1    | resource   | aws_subnet                                                                   | Ensure that all NACL are attached to subnets                                                                                                                                                             | Terraform      |
+|  280 | CKV2_AWS_1    | resource   | aws_network_acl                                                              | Ensure that all NACL are attached to subnets                                                                                                                                                             | Terraform      |
 |  281 | CKV2_AWS_2    | resource   | aws_volume_attachment                                                        | Ensure that only encrypted EBS volumes are attached to EC2 instances                                                                                                                                     | Terraform      |
 |  282 | CKV2_AWS_2    | resource   | aws_ebs_volume                                                               | Ensure that only encrypted EBS volumes are attached to EC2 instances                                                                                                                                     | Terraform      |
-|  283 | CKV2_AWS_3    | resource   | aws_guardduty_detector                                                       | Ensure GuardDuty is enbaled to specific org/region                                                                                                                                                       | Terraform      |
-|  284 | CKV2_AWS_3    | resource   | aws_guardduty_organization_configuration                                     | Ensure GuardDuty is enbaled to specific org/region                                                                                                                                                       | Terraform      |
+|  283 | CKV2_AWS_3    | resource   | aws_guardduty_organization_configuration                                     | Ensure GuardDuty is enbaled to specific org/region                                                                                                                                                       | Terraform      |
+|  284 | CKV2_AWS_3    | resource   | aws_guardduty_detector                                                       | Ensure GuardDuty is enbaled to specific org/region                                                                                                                                                       | Terraform      |
 |  285 | CKV2_AWS_4    | resource   | aws_api_gateway_method_settings                                              | Ensure API Gateway stage have logging level defined as appropiate                                                                                                                                        | Terraform      |
 |  286 | CKV2_AWS_4    | resource   | aws_api_gateway_stage                                                        | Ensure API Gateway stage have logging level defined as appropiate                                                                                                                                        | Terraform      |
 |  287 | CKV2_AWS_5    | resource   | aws_security_group                                                           | Ensure that Security Groups are attached to EC2 instances or elastic network interfaces (ENIs)                                                                                                           | Terraform      |
-|  288 | CKV2_AWS_6    | resource   | aws_s3_bucket_public_access_block                                            | Ensure that S3 bucket has a Public Access block                                                                                                                                                          | Terraform      |
-|  289 | CKV2_AWS_6    | resource   | aws_s3_bucket                                                                | Ensure that S3 bucket has a Public Access block                                                                                                                                                          | Terraform      |
+|  288 | CKV2_AWS_6    | resource   | aws_s3_bucket                                                                | Ensure that S3 bucket has a Public Access block                                                                                                                                                          | Terraform      |
+|  289 | CKV2_AWS_6    | resource   | aws_s3_bucket_public_access_block                                            | Ensure that S3 bucket has a Public Access block                                                                                                                                                          | Terraform      |
 |  290 | CKV2_AWS_7    | resource   | aws_security_group                                                           | Ensure that Amazon EMR clusters' security groups are not open to the world                                                                                                                               | Terraform      |
 |  291 | CKV2_AWS_7    | resource   | aws_emr_cluster                                                              | Ensure that Amazon EMR clusters' security groups are not open to the world                                                                                                                               | Terraform      |
 |  292 | CKV2_AWS_8    | resource   | aws_rds_cluster                                                              | Ensure that RDS clusters has backup plan of AWS Backup                                                                                                                                                   | Terraform      |
 |  293 | CKV2_AWS_9    | resource   | aws_backup_selection                                                         | Ensure that EBS are added in the backup plans of AWS Backup                                                                                                                                              | Terraform      |
 |  294 | CKV2_AWS_10   | resource   | aws_cloudtrail                                                               | Ensure CloudTrail trails are integrated with CloudWatch Logs                                                                                                                                             | Terraform      |
 |  295 | CKV2_AWS_11   | resource   | aws_vpc                                                                      | Ensure VPC flow logging is enabled in all VPCs                                                                                                                                                           | Terraform      |
-|  296 | CKV2_AWS_12   | resource   | aws_vpc                                                                      | Ensure the default security group of every VPC restricts all traffic                                                                                                                                     | Terraform      |
-|  297 | CKV2_AWS_12   | resource   | aws_default_security_group                                                   | Ensure the default security group of every VPC restricts all traffic                                                                                                                                     | Terraform      |
+|  296 | CKV2_AWS_12   | resource   | aws_default_security_group                                                   | Ensure the default security group of every VPC restricts all traffic                                                                                                                                     | Terraform      |
+|  297 | CKV2_AWS_12   | resource   | aws_vpc                                                                      | Ensure the default security group of every VPC restricts all traffic                                                                                                                                     | Terraform      |
 |  298 | CKV2_AWS_13   | resource   | aws_redshift_cluster                                                         | Ensure that Redshift clusters has backup plan of AWS Backup                                                                                                                                              | Terraform      |
 |  299 | CKV2_AWS_14   | resource   | aws_iam_group_membership                                                     | Ensure that IAM groups includes at least one IAM user                                                                                                                                                    | Terraform      |
 |  300 | CKV2_AWS_14   | resource   | aws_iam_group                                                                | Ensure that IAM groups includes at least one IAM user                                                                                                                                                    | Terraform      |
-|  301 | CKV2_AWS_15   | resource   | aws_elb                                                                      | Ensure that auto Scaling groups that are associated with a load balancer are using Elastic Load Balancing health checks.                                                                                 | Terraform      |
-|  302 | CKV2_AWS_15   | resource   | aws_autoscaling_group                                                        | Ensure that auto Scaling groups that are associated with a load balancer are using Elastic Load Balancing health checks.                                                                                 | Terraform      |
+|  301 | CKV2_AWS_15   | resource   | aws_autoscaling_group                                                        | Ensure that auto Scaling groups that are associated with a load balancer are using Elastic Load Balancing health checks.                                                                                 | Terraform      |
+|  302 | CKV2_AWS_15   | resource   | aws_elb                                                                      | Ensure that auto Scaling groups that are associated with a load balancer are using Elastic Load Balancing health checks.                                                                                 | Terraform      |
 |  303 | CKV2_AWS_16   | resource   | aws_appautoscaling_policy                                                    | Ensure that Auto Scaling is enabled on your DynamoDB tables                                                                                                                                              | Terraform      |
 |  304 | CKV2_AWS_16   | resource   | aws_appautoscaling_target                                                    | Ensure that Auto Scaling is enabled on your DynamoDB tables                                                                                                                                              | Terraform      |
 |  305 | CKV2_AWS_17   | resource   | aws_subnet                                                                   | Ensure that EC2 instances belong to a VPC                                                                                                                                                                | Terraform      |
@@ -522,45 +522,45 @@ nav_order: 1
 |  511 | CKV_AZURE_131 | resource   | azurerm_security_center_contact                                              | Ensure that 'Security contact emails' is set                                                                                                                                                             | Terraform      |
 |  512 | CKV_AZURE_131 | parameter  | secureString                                                                 | SecureString parameter should not have hardcoded default values                                                                                                                                          | arm            |
 |  513 | CKV2_AZURE_1  | resource   | azurerm_storage_account                                                      | Ensure storage for critical data are encrypted with Customer Managed Key                                                                                                                                 | Terraform      |
-|  514 | CKV2_AZURE_2  | resource   | azurerm_mssql_server_security_alert_policy                                   | Ensure that Vulnerability Assessment (VA) is enabled on a SQL server by setting a Storage Account                                                                                                        | Terraform      |
-|  515 | CKV2_AZURE_2  | resource   | azurerm_sql_server                                                           | Ensure that Vulnerability Assessment (VA) is enabled on a SQL server by setting a Storage Account                                                                                                        | Terraform      |
-|  516 | CKV2_AZURE_3  | resource   | azurerm_mssql_server_security_alert_policy                                   | Ensure that VA setting Periodic Recurring Scans is enabled on a SQL server                                                                                                                               | Terraform      |
+|  514 | CKV2_AZURE_2  | resource   | azurerm_sql_server                                                           | Ensure that Vulnerability Assessment (VA) is enabled on a SQL server by setting a Storage Account                                                                                                        | Terraform      |
+|  515 | CKV2_AZURE_2  | resource   | azurerm_mssql_server_security_alert_policy                                   | Ensure that Vulnerability Assessment (VA) is enabled on a SQL server by setting a Storage Account                                                                                                        | Terraform      |
+|  516 | CKV2_AZURE_3  | resource   | azurerm_mssql_server_vulnerability_assessment                                | Ensure that VA setting Periodic Recurring Scans is enabled on a SQL server                                                                                                                               | Terraform      |
 |  517 | CKV2_AZURE_3  | resource   | azurerm_sql_server                                                           | Ensure that VA setting Periodic Recurring Scans is enabled on a SQL server                                                                                                                               | Terraform      |
-|  518 | CKV2_AZURE_3  | resource   | azurerm_mssql_server_vulnerability_assessment                                | Ensure that VA setting Periodic Recurring Scans is enabled on a SQL server                                                                                                                               | Terraform      |
-|  519 | CKV2_AZURE_4  | resource   | azurerm_mssql_server_security_alert_policy                                   | Ensure that VA setting Periodic Recurring Scans is enabled on a SQL server                                                                                                                               | Terraform      |
+|  518 | CKV2_AZURE_3  | resource   | azurerm_mssql_server_security_alert_policy                                   | Ensure that VA setting Periodic Recurring Scans is enabled on a SQL server                                                                                                                               | Terraform      |
+|  519 | CKV2_AZURE_4  | resource   | azurerm_mssql_server_vulnerability_assessment                                | Ensure that VA setting Periodic Recurring Scans is enabled on a SQL server                                                                                                                               | Terraform      |
 |  520 | CKV2_AZURE_4  | resource   | azurerm_sql_server                                                           | Ensure that VA setting Periodic Recurring Scans is enabled on a SQL server                                                                                                                               | Terraform      |
-|  521 | CKV2_AZURE_4  | resource   | azurerm_mssql_server_vulnerability_assessment                                | Ensure that VA setting Periodic Recurring Scans is enabled on a SQL server                                                                                                                               | Terraform      |
-|  522 | CKV2_AZURE_5  | resource   | azurerm_mssql_server_security_alert_policy                                   | Ensure that VA setting 'Also send email notifications to admins and subscription owners' is set for a SQL server                                                                                         | Terraform      |
+|  521 | CKV2_AZURE_4  | resource   | azurerm_mssql_server_security_alert_policy                                   | Ensure that VA setting Periodic Recurring Scans is enabled on a SQL server                                                                                                                               | Terraform      |
+|  522 | CKV2_AZURE_5  | resource   | azurerm_mssql_server_vulnerability_assessment                                | Ensure that VA setting 'Also send email notifications to admins and subscription owners' is set for a SQL server                                                                                         | Terraform      |
 |  523 | CKV2_AZURE_5  | resource   | azurerm_sql_server                                                           | Ensure that VA setting 'Also send email notifications to admins and subscription owners' is set for a SQL server                                                                                         | Terraform      |
-|  524 | CKV2_AZURE_5  | resource   | azurerm_mssql_server_vulnerability_assessment                                | Ensure that VA setting 'Also send email notifications to admins and subscription owners' is set for a SQL server                                                                                         | Terraform      |
+|  524 | CKV2_AZURE_5  | resource   | azurerm_mssql_server_security_alert_policy                                   | Ensure that VA setting 'Also send email notifications to admins and subscription owners' is set for a SQL server                                                                                         | Terraform      |
 |  525 | CKV2_AZURE_6  | resource   | azurerm_sql_firewall_rule                                                    | Ensure 'Allow access to Azure services' for PostgreSQL Database Server is disabled                                                                                                                       | Terraform      |
 |  526 | CKV2_AZURE_6  | resource   | azurerm_sql_server                                                           | Ensure 'Allow access to Azure services' for PostgreSQL Database Server is disabled                                                                                                                       | Terraform      |
 |  527 | CKV2_AZURE_7  | resource   | azurerm_sql_server                                                           | Ensure that Azure Active Directory Admin is configured                                                                                                                                                   | Terraform      |
-|  528 | CKV2_AZURE_8  | resource   | azurerm_storage_container                                                    | Ensure the storage container storing the activity logs is not publicly accessible                                                                                                                        | Terraform      |
-|  529 | CKV2_AZURE_8  | resource   | azurerm_monitor_activity_log_alert                                           | Ensure the storage container storing the activity logs is not publicly accessible                                                                                                                        | Terraform      |
+|  528 | CKV2_AZURE_8  | resource   | azurerm_monitor_activity_log_alert                                           | Ensure the storage container storing the activity logs is not publicly accessible                                                                                                                        | Terraform      |
+|  529 | CKV2_AZURE_8  | resource   | azurerm_storage_container                                                    | Ensure the storage container storing the activity logs is not publicly accessible                                                                                                                        | Terraform      |
 |  530 | CKV2_AZURE_9  | resource   | azurerm_virtual_machine                                                      | Ensure Virtual Machines are utilizing Managed Disks                                                                                                                                                      | Terraform      |
-|  531 | CKV2_AZURE_10 | resource   | azurerm_virtual_machine_extension                                            | Ensure that Microsoft Antimalware is configured to automatically updates for Virtual Machines                                                                                                            | Terraform      |
-|  532 | CKV2_AZURE_10 | resource   | azurerm_virtual_machine                                                      | Ensure that Microsoft Antimalware is configured to automatically updates for Virtual Machines                                                                                                            | Terraform      |
+|  531 | CKV2_AZURE_10 | resource   | azurerm_virtual_machine                                                      | Ensure that Microsoft Antimalware is configured to automatically updates for Virtual Machines                                                                                                            | Terraform      |
+|  532 | CKV2_AZURE_10 | resource   | azurerm_virtual_machine_extension                                            | Ensure that Microsoft Antimalware is configured to automatically updates for Virtual Machines                                                                                                            | Terraform      |
 |  533 | CKV2_AZURE_11 | resource   | azurerm_kusto_cluster                                                        | Ensure that Azure Data Explorer encryption at rest uses a customer-managed key                                                                                                                           | Terraform      |
 |  534 | CKV2_AZURE_12 | resource   | azurerm_virtual_machine                                                      | Ensure that virtual machines are backed up using Azure Backup                                                                                                                                            | Terraform      |
-|  535 | CKV2_AZURE_13 | resource   | azurerm_mssql_server_security_alert_policy                                   | Ensure that sql servers enables data security policy                                                                                                                                                     | Terraform      |
-|  536 | CKV2_AZURE_13 | resource   | azurerm_sql_server                                                           | Ensure that sql servers enables data security policy                                                                                                                                                     | Terraform      |
+|  535 | CKV2_AZURE_13 | resource   | azurerm_sql_server                                                           | Ensure that sql servers enables data security policy                                                                                                                                                     | Terraform      |
+|  536 | CKV2_AZURE_13 | resource   | azurerm_mssql_server_security_alert_policy                                   | Ensure that sql servers enables data security policy                                                                                                                                                     | Terraform      |
 |  537 | CKV2_AZURE_14 | resource   | azurerm_virtual_machine                                                      | Ensure that Unattached disks are encrypted                                                                                                                                                               | Terraform      |
 |  538 | CKV2_AZURE_14 | resource   | azurerm_managed_disk                                                         | Ensure that Unattached disks are encrypted                                                                                                                                                               | Terraform      |
 |  539 | CKV2_AZURE_15 | resource   | azurerm_data_factory                                                         | Ensure that Azure data factories are encrypted with a customer-managed key                                                                                                                               | Terraform      |
-|  540 | CKV2_AZURE_16 | resource   | azurerm_mysql_server_key                                                     | Ensure that MySQL server enables customer-managed key for encryption                                                                                                                                     | Terraform      |
-|  541 | CKV2_AZURE_16 | resource   | azurerm_mysql_server                                                         | Ensure that MySQL server enables customer-managed key for encryption                                                                                                                                     | Terraform      |
-|  542 | CKV2_AZURE_17 | resource   | azurerm_postgresql_server                                                    | Ensure that PostgreSQL server enables customer-managed key for encryption                                                                                                                                | Terraform      |
-|  543 | CKV2_AZURE_17 | resource   | azurerm_postgresql_server_key                                                | Ensure that PostgreSQL server enables customer-managed key for encryption                                                                                                                                | Terraform      |
-|  544 | CKV2_AZURE_18 | resource   | azurerm_storage_account_customer_managed_key                                 | Ensure that Storage Accounts use customer-managed key for encryption                                                                                                                                     | Terraform      |
-|  545 | CKV2_AZURE_18 | resource   | azurerm_storage_account                                                      | Ensure that Storage Accounts use customer-managed key for encryption                                                                                                                                     | Terraform      |
+|  540 | CKV2_AZURE_16 | resource   | azurerm_mysql_server                                                         | Ensure that MySQL server enables customer-managed key for encryption                                                                                                                                     | Terraform      |
+|  541 | CKV2_AZURE_16 | resource   | azurerm_mysql_server_key                                                     | Ensure that MySQL server enables customer-managed key for encryption                                                                                                                                     | Terraform      |
+|  542 | CKV2_AZURE_17 | resource   | azurerm_postgresql_server_key                                                | Ensure that PostgreSQL server enables customer-managed key for encryption                                                                                                                                | Terraform      |
+|  543 | CKV2_AZURE_17 | resource   | azurerm_postgresql_server                                                    | Ensure that PostgreSQL server enables customer-managed key for encryption                                                                                                                                | Terraform      |
+|  544 | CKV2_AZURE_18 | resource   | azurerm_storage_account                                                      | Ensure that Storage Accounts use customer-managed key for encryption                                                                                                                                     | Terraform      |
+|  545 | CKV2_AZURE_18 | resource   | azurerm_storage_account_customer_managed_key                                 | Ensure that Storage Accounts use customer-managed key for encryption                                                                                                                                     | Terraform      |
 |  546 | CKV2_AZURE_19 | resource   | azurerm_synapse_workspace                                                    | Ensure that Azure Synapse workspaces have no IP firewall rules attached                                                                                                                                  | Terraform      |
-|  547 | CKV2_AZURE_20 | resource   | azurerm_storage_table                                                        | Ensure Storage logging is enabled for Table service for read requests                                                                                                                                    | Terraform      |
-|  548 | CKV2_AZURE_20 | resource   | azurerm_log_analytics_storage_insights                                       | Ensure Storage logging is enabled for Table service for read requests                                                                                                                                    | Terraform      |
-|  549 | CKV2_AZURE_20 | resource   | azurerm_storage_account                                                      | Ensure Storage logging is enabled for Table service for read requests                                                                                                                                    | Terraform      |
-|  550 | CKV2_AZURE_21 | resource   | azurerm_log_analytics_storage_insights                                       | Ensure Storage logging is enabled for Blob service for read requests                                                                                                                                     | Terraform      |
-|  551 | CKV2_AZURE_21 | resource   | azurerm_storage_container                                                    | Ensure Storage logging is enabled for Blob service for read requests                                                                                                                                     | Terraform      |
-|  552 | CKV2_AZURE_21 | resource   | azurerm_storage_account                                                      | Ensure Storage logging is enabled for Blob service for read requests                                                                                                                                     | Terraform      |
+|  547 | CKV2_AZURE_20 | resource   | azurerm_storage_account                                                      | Ensure Storage logging is enabled for Table service for read requests                                                                                                                                    | Terraform      |
+|  548 | CKV2_AZURE_20 | resource   | azurerm_storage_table                                                        | Ensure Storage logging is enabled for Table service for read requests                                                                                                                                    | Terraform      |
+|  549 | CKV2_AZURE_20 | resource   | azurerm_log_analytics_storage_insights                                       | Ensure Storage logging is enabled for Table service for read requests                                                                                                                                    | Terraform      |
+|  550 | CKV2_AZURE_21 | resource   | azurerm_storage_account                                                      | Ensure Storage logging is enabled for Blob service for read requests                                                                                                                                     | Terraform      |
+|  551 | CKV2_AZURE_21 | resource   | azurerm_log_analytics_storage_insights                                       | Ensure Storage logging is enabled for Blob service for read requests                                                                                                                                     | Terraform      |
+|  552 | CKV2_AZURE_21 | resource   | azurerm_storage_container                                                    | Ensure Storage logging is enabled for Blob service for read requests                                                                                                                                     | Terraform      |
 |  553 | CKV_DOCKER_1  | dockerfile | EXPOSE                                                                       | Ensure port 22 is not exposed                                                                                                                                                                            | dockerfile     |
 |  554 | CKV_DOCKER_2  | dockerfile | *                                                                            | Ensure that HEALTHCHECK instructions have been added to container images                                                                                                                                 | dockerfile     |
 |  555 | CKV_DOCKER_3  | dockerfile | *                                                                            | Ensure that a user for the container has been created                                                                                                                                                    | dockerfile     |
@@ -653,279 +653,279 @@ nav_order: 1
 |  642 | CKV_GCP_72    | resource   | google_container_cluster                                                     | Ensure Integrity Monitoring for Shielded GKE Nodes is Enabled                                                                                                                                            | Terraform      |
 |  643 | CKV2_GCP_1    | resource   | google_project_default_service_accounts                                      | Ensure GKE clusters are not running using the Compute Engine default service account                                                                                                                     | Terraform      |
 |  644 | CKV2_GCP_2    | resource   | google_compute_network                                                       | Ensure legacy networks do not exist for a project                                                                                                                                                        | Terraform      |
-|  645 | CKV2_GCP_3    | resource   | google_storage_bucket_object                                                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  646 | CKV2_GCP_3    | resource   | google_ml_engine_model                                                       | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  647 | CKV2_GCP_3    | resource   | google_secret_manager_secret                                                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  648 | CKV2_GCP_3    | resource   | google_cloud_run_domain_mapping                                              | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  649 | CKV2_GCP_3    | resource   | google_folder_organization_policy                                            | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  650 | CKV2_GCP_3    | resource   | google_compute_network_endpoint_group                                        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  651 | CKV2_GCP_3    | resource   | google_organization_iam_custom_role                                          | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  652 | CKV2_GCP_3    | resource   | google_billing_account_iam_binding                                           | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  653 | CKV2_GCP_3    | resource   | google_compute_region_instance_group_manager                                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  654 | CKV2_GCP_3    | resource   | google_healthcare_hl7_v2_store_iam                                           | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  655 | CKV2_GCP_3    | resource   | google_iap_web_type_compute_iam                                              | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  656 | CKV2_GCP_3    | resource   | google_iap_web_backend_service_iam                                           | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  657 | CKV2_GCP_3    | resource   | google_bigquery_data_transfer_config                                         | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  658 | CKV2_GCP_3    | resource   | google_app_engine_application_url_dispatch_rules                             | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  659 | CKV2_GCP_3    | resource   | google_cloudfunctions_function                                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  660 | CKV2_GCP_3    | resource   | google_healthcare_dataset_iam                                                | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  661 | CKV2_GCP_3    | resource   | google_compute_health_check                                                  | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  662 | CKV2_GCP_3    | resource   | google_compute_interconnect_attachment                                       | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  663 | CKV2_GCP_3    | resource   | google_container_node_pool                                                   | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  664 | CKV2_GCP_3    | resource   | google_pubsub_subscription                                                   | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  665 | CKV2_GCP_3    | resource   | google_compute_network_peering                                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  666 | CKV2_GCP_3    | resource   | google_folder_iam_member                                                     | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  667 | CKV2_GCP_3    | resource   | google_redis_instance                                                        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  668 | CKV2_GCP_3    | resource   | google_compute_region_url_map                                                | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  669 | CKV2_GCP_3    | resource   | google_compute_region_target_http_proxy                                      | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  670 | CKV2_GCP_3    | resource   | google_compute_resource_policy                                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  671 | CKV2_GCP_3    | resource   | google_cloudiot_device_registry                                              | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  672 | CKV2_GCP_3    | resource   | google_bigquery_job                                                          | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  673 | CKV2_GCP_3    | resource   | google_compute_backend_service_signed_url_key                                | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  674 | CKV2_GCP_3    | resource   | google_dataproc_cluster_iam                                                  | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  675 | CKV2_GCP_3    | resource   | google_sourcerepo_repository_iam                                             | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  676 | CKV2_GCP_3    | resource   | google_datastore_index                                                       | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  677 | CKV2_GCP_3    | resource   | google_cloudiot_device                                                       | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  678 | CKV2_GCP_3    | resource   | google_bigtable_gc_policy                                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  679 | CKV2_GCP_3    | resource   | google_compute_router                                                        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  680 | CKV2_GCP_3    | resource   | google_tpu_node                                                              | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  681 | CKV2_GCP_3    | resource   | google_compute_region_backend_service                                        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  682 | CKV2_GCP_3    | resource   | google_folder                                                                | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  683 | CKV2_GCP_3    | resource   | google_compute_disk                                                          | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  684 | CKV2_GCP_3    | resource   | google_compute_instance_iam                                                  | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  685 | CKV2_GCP_3    | resource   | google_identity_platform_tenant_oauth_idp_config                             | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  686 | CKV2_GCP_3    | resource   | google_bigquery_dataset_access                                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  687 | CKV2_GCP_3    | resource   | google_dns_record_set                                                        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  688 | CKV2_GCP_3    | resource   | google_compute_target_https_proxy                                            | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  689 | CKV2_GCP_3    | resource   | google_runtimeconfig_config_iam                                              | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  690 | CKV2_GCP_3    | resource   | google_project_iam_binding                                                   | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  691 | CKV2_GCP_3    | resource   | google_logging_folder_exclusion                                              | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  692 | CKV2_GCP_3    | resource   | google_data_catalog_entry_group                                              | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  693 | CKV2_GCP_3    | resource   | google_filestore_instance                                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  694 | CKV2_GCP_3    | resource   | google_compute_backend_bucket                                                | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  695 | CKV2_GCP_3    | resource   | google_compute_disk_resource_policy_attachment                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  696 | CKV2_GCP_3    | resource   | google_container_analysis_note                                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  697 | CKV2_GCP_3    | resource   | google_identity_platform_oauth_idp_config                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  698 | CKV2_GCP_3    | resource   | google_binary_authorization_attestor                                         | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  699 | CKV2_GCP_3    | resource   | google_sql_database_instance                                                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  700 | CKV2_GCP_3    | resource   | google_monitoring_uptime_check_config                                        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  701 | CKV2_GCP_3    | resource   | google_compute_project_metadata_item                                         | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  702 | CKV2_GCP_3    | resource   | google_access_context_manager_service_perimeter_resource                     | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  703 | CKV2_GCP_3    | resource   | google_container_registry                                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  704 | CKV2_GCP_3    | resource   | google_identity_platform_tenant_inbound_saml_config                          | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  705 | CKV2_GCP_3    | resource   | google_iap_app_engine_service_iam                                            | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  706 | CKV2_GCP_3    | resource   | google_identity_platform_tenant                                              | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  707 | CKV2_GCP_3    | resource   | google_os_config_patch_deployment                                            | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  708 | CKV2_GCP_3    | resource   | google_compute_region_ssl_certificate                                        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  709 | CKV2_GCP_3    | resource   | google_sql_source_representation_instance                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  710 | CKV2_GCP_3    | resource   | google_storage_notification                                                  | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  711 | CKV2_GCP_3    | resource   | google_binary_authorization_attestor_iam                                     | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  712 | CKV2_GCP_3    | resource   | google_compute_global_network_endpoint_group                                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  713 | CKV2_GCP_3    | resource   | google_billing_account_iam_policy                                            | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  714 | CKV2_GCP_3    | resource   | google_monitoring_notification_channel                                       | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  715 | CKV2_GCP_3    | resource   | google_pubsub_subscription_iam                                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  716 | CKV2_GCP_3    | resource   | google_cloud_tasks_queue                                                     | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  717 | CKV2_GCP_3    | resource   | google_dns_managed_zone                                                      | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  718 | CKV2_GCP_3    | resource   | google_dataproc_autoscaling_policy                                           | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  719 | CKV2_GCP_3    | resource   | google_iap_client                                                            | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  720 | CKV2_GCP_3    | resource   | google_project                                                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  721 | CKV2_GCP_3    | resource   | google_compute_firewall                                                      | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  722 | CKV2_GCP_3    | resource   | google_sql_database                                                          | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  723 | CKV2_GCP_3    | resource   | google_resource_manager_lien                                                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  724 | CKV2_GCP_3    | resource   | google_sql_ssl_cert                                                          | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  725 | CKV2_GCP_3    | resource   | google_iap_web_iam                                                           | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  726 | CKV2_GCP_3    | resource   | google_project_iam_member                                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  727 | CKV2_GCP_3    | resource   | google_compute_instance_template                                             | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  728 | CKV2_GCP_3    | resource   | google_logging_organization_bucket_config                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  729 | CKV2_GCP_3    | resource   | google_compute_region_disk                                                   | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  730 | CKV2_GCP_3    | resource   | google_compute_subnetwork                                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  731 | CKV2_GCP_3    | resource   | google_folder_iam_policy                                                     | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  732 | CKV2_GCP_3    | resource   | google_organization_policy                                                   | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  733 | CKV2_GCP_3    | resource   | google_spanner_instance_iam                                                  | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  734 | CKV2_GCP_3    | resource   | google_bigquery_dataset_iam                                                  | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  735 | CKV2_GCP_3    | resource   | google_bigquery_dataset                                                      | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  736 | CKV2_GCP_3    | resource   | google_sourcerepo_repository                                                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  737 | CKV2_GCP_3    | resource   | google_logging_project_sink                                                  | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  738 | CKV2_GCP_3    | resource   | google_healthcare_hl7_v2_store                                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  739 | CKV2_GCP_3    | resource   | google_app_engine_application                                                | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  740 | CKV2_GCP_3    | resource   | google_compute_target_pool                                                   | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  741 | CKV2_GCP_3    | resource   | google_service_account_key                                                   | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  742 | CKV2_GCP_3    | resource   | google_compute_router_bgp_peer                                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  743 | CKV2_GCP_3    | resource   | google_service_account                                                       | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  744 | CKV2_GCP_3    | resource   | google_iap_tunnel_instance_iam                                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  745 | CKV2_GCP_3    | resource   | google_project_iam_custom_role                                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  746 | CKV2_GCP_3    | resource   | google_storage_object_access_control                                         | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  747 | CKV2_GCP_3    | resource   | google_compute_vpn_tunnel                                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  748 | CKV2_GCP_3    | resource   | google_logging_organization_sink                                             | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  749 | CKV2_GCP_3    | resource   | google_compute_network_endpoint                                              | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  750 | CKV2_GCP_3    | resource   | google_cloudbuild_trigger                                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  751 | CKV2_GCP_3    | resource   | google_compute_snapshot                                                      | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  752 | CKV2_GCP_3    | resource   | google_sql_user                                                              | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  753 | CKV2_GCP_3    | resource   | google_compute_instance                                                      | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  754 | CKV2_GCP_3    | resource   | google_storage_bucket_access_control                                         | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  755 | CKV2_GCP_3    | resource   | google_compute_network                                                       | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  756 | CKV2_GCP_3    | resource   | google_storage_bucket_iam_binding                                            | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  757 | CKV2_GCP_3    | resource   | google_service_account_iam                                                   | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  758 | CKV2_GCP_3    | resource   | google_bigtable_table                                                        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  759 | CKV2_GCP_3    | resource   | google_monitoring_service                                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  760 | CKV2_GCP_3    | resource   | google_healthcare_dicom_store_iam                                            | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  761 | CKV2_GCP_3    | resource   | google_compute_attached_disk                                                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  762 | CKV2_GCP_3    | resource   | google_compute_node_group                                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  763 | CKV2_GCP_3    | resource   | google_compute_region_autoscaler                                             | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  764 | CKV2_GCP_3    | resource   | google_compute_reservation                                                   | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  765 | CKV2_GCP_3    | resource   | google_data_catalog_tag                                                      | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  766 | CKV2_GCP_3    | resource   | google_dataproc_cluster                                                      | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  767 | CKV2_GCP_3    | resource   | google_project_service                                                       | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  768 | CKV2_GCP_3    | resource   | google_storage_bucket_acl                                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  769 | CKV2_GCP_3    | resource   | google_secret_manager_secret_iam                                             | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  770 | CKV2_GCP_3    | resource   | google_bigtable_app_profile                                                  | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  771 | CKV2_GCP_3    | resource   | google_access_context_manager_access_level                                   | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  772 | CKV2_GCP_3    | resource   | google_storage_bucket_iam_member                                             | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  773 | CKV2_GCP_3    | resource   | google_monitoring_group                                                      | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  774 | CKV2_GCP_3    | resource   | google_container_cluster                                                     | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  775 | CKV2_GCP_3    | resource   | google_compute_target_tcp_proxy                                              | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  776 | CKV2_GCP_3    | resource   | google_project_organization_policy                                           | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  777 | CKV2_GCP_3    | resource   | google_kms_secret_ciphertext                                                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  778 | CKV2_GCP_3    | resource   | google_cloudfunctions_cloud_function_iam                                     | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  779 | CKV2_GCP_3    | resource   | google_storage_bucket_iam                                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  780 | CKV2_GCP_3    | resource   | google_network_management_connectivity_test_resource                         | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  781 | CKV2_GCP_3    | resource   | google_dialogflow_agent                                                      | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  782 | CKV2_GCP_3    | resource   | google_folder_iam_binding                                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  783 | CKV2_GCP_3    | resource   | google_runtimeconfig_variable                                                | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  784 | CKV2_GCP_3    | resource   | google_cloud_run_service_iam                                                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  785 | CKV2_GCP_3    | resource   | google_folder_iam_audit_config                                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  786 | CKV2_GCP_3    | resource   | google_compute_instance_from_template                                        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  787 | CKV2_GCP_3    | resource   | google_compute_ssl_certificate                                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  788 | CKV2_GCP_3    | resource   | google_logging_billing_account_sink                                          | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  789 | CKV2_GCP_3    | resource   | google_compute_shared_vpc_host_project                                       | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  790 | CKV2_GCP_3    | resource   | google_iap_app_engine_version_iam                                            | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  791 | CKV2_GCP_3    | resource   | google_iap_brand                                                             | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  792 | CKV2_GCP_3    | resource   | google_bigtable_instance                                                     | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  793 | CKV2_GCP_3    | resource   | google_deployment_manager_deployment                                         | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  794 | CKV2_GCP_3    | resource   | google_compute_shared_vpc_service_project                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  795 | CKV2_GCP_3    | resource   | google_secret_manager_secret_version                                         | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  796 | CKV2_GCP_3    | resource   | google_cloud_run_service                                                     | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  797 | CKV2_GCP_3    | resource   | google_monitoring_metric_descriptor                                          | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  798 | CKV2_GCP_3    | resource   | google_data_catalog_entry                                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  799 | CKV2_GCP_3    | resource   | google_billing_account_iam_member                                            | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  800 | CKV2_GCP_3    | resource   | google_compute_region_target_https_proxy                                     | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  801 | CKV2_GCP_3    | resource   | google_compute_backend_service                                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  802 | CKV2_GCP_3    | resource   | google_compute_instance_group_manager                                        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  803 | CKV2_GCP_3    | resource   | google_logging_project_bucket_config                                         | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  804 | CKV2_GCP_3    | resource   | google_pubsub_topic                                                          | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  805 | CKV2_GCP_3    | resource   | google_compute_address                                                       | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  806 | CKV2_GCP_3    | resource   | google_compute_network_peering_routes_config                                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  807 | CKV2_GCP_3    | resource   | google_compute_router_interface                                              | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  808 | CKV2_GCP_3    | resource   | google_spanner_instance                                                      | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  809 | CKV2_GCP_3    | resource   | google_compute_router_nat                                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  810 | CKV2_GCP_3    | resource   | google_dataproc_job_iam                                                      | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  811 | CKV2_GCP_3    | resource   | google_binary_authorization_policy                                           | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  812 | CKV2_GCP_3    | resource   | google_cloud_asset_folder_feed                                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  813 | CKV2_GCP_3    | resource   | google_cloud_scheduler_job                                                   | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  814 | CKV2_GCP_3    | resource   | google_compute_instance_group_named_port                                     | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  815 | CKV2_GCP_3    | resource   | google_dataflow_job                                                          | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  816 | CKV2_GCP_3    | resource   | google_monitoring_dashboard                                                  | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  817 | CKV2_GCP_3    | resource   | google_firestore_index                                                       | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  818 | CKV2_GCP_3    | resource   | google_vpc_access_connector                                                  | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  819 | CKV2_GCP_3    | resource   | google_logging_project_exclusion                                             | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  820 | CKV2_GCP_3    | resource   | google_bigquery_table                                                        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  821 | CKV2_GCP_3    | resource   | google_project_iam                                                           | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  822 | CKV2_GCP_3    | resource   | google_service_networking_connection                                         | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  823 | CKV2_GCP_3    | resource   | google_healthcare_dataset                                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  824 | CKV2_GCP_3    | resource   | google_organization_iam_binding                                              | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  825 | CKV2_GCP_3    | resource   | google_monitoring_alert_policy                                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  826 | CKV2_GCP_3    | resource   | google_cloud_asset_project_feed                                              | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  827 | CKV2_GCP_3    | resource   | google_dialogflow_intent                                                     | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  828 | CKV2_GCP_3    | resource   | google_compute_backend_bucket_signed_url_key                                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  829 | CKV2_GCP_3    | resource   | google_compute_image                                                         | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  830 | CKV2_GCP_3    | resource   | google_os_login_ssh_public_key                                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  831 | CKV2_GCP_3    | resource   | google_storage_default_object_access_control                                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  832 | CKV2_GCP_3    | resource   | google_compute_target_http_proxy                                             | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  833 | CKV2_GCP_3    | resource   | google_runtimeconfig_config                                                  | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  834 | CKV2_GCP_3    | resource   | google_app_engine_domain_mapping                                             | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  835 | CKV2_GCP_3    | resource   | google_organization_iam_policy                                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  836 | CKV2_GCP_3    | resource   | google_app_engine_standard_app_version                                       | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  837 | CKV2_GCP_3    | resource   | google_storage_hmac_key                                                      | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  838 | CKV2_GCP_3    | resource   | google_compute_target_instance                                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  839 | CKV2_GCP_3    | resource   | google_identity_platform_inbound_saml_config                                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  840 | CKV2_GCP_3    | resource   | google_compute_forwarding_rule                                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  841 | CKV2_GCP_3    | resource   | google_compute_security_policy                                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  842 | CKV2_GCP_3    | resource   | google_dns_policy                                                            | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  843 | CKV2_GCP_3    | resource   | google_access_context_manager_service_perimeter                              | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  844 | CKV2_GCP_3    | resource   | google_bigtable_instance_iam                                                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  845 | CKV2_GCP_3    | resource   | google_compute_global_address                                                | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  846 | CKV2_GCP_3    | resource   | google_scc_source                                                            | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  847 | CKV2_GCP_3    | resource   | google_compute_https_health_check                                            | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  848 | CKV2_GCP_3    | resource   | google_composer_environment                                                  | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  849 | CKV2_GCP_3    | resource   | google_organization_iam_audit_config                                         | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  850 | CKV2_GCP_3    | resource   | google_compute_node_template                                                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  851 | CKV2_GCP_3    | resource   | google_app_engine_firewall_rule                                              | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  852 | CKV2_GCP_3    | resource   | google_compute_autoscaler                                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  853 | CKV2_GCP_3    | resource   | google_dataproc_job                                                          | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  854 | CKV2_GCP_3    | resource   | google_active_directory_domain                                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  855 | CKV2_GCP_3    | resource   | google_healthcare_fhir_store                                                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  856 | CKV2_GCP_3    | resource   | google_logging_metric                                                        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  857 | CKV2_GCP_3    | resource   | google_compute_project_default_network_tier                                  | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  858 | CKV2_GCP_3    | resource   | google_compute_project_metadata                                              | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  859 | CKV2_GCP_3    | resource   | google_compute_global_network_endpoint                                       | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  860 | CKV2_GCP_3    | resource   | google_compute_url_map                                                       | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  861 | CKV2_GCP_3    | resource   | google_app_engine_flexible_app_version                                       | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  862 | CKV2_GCP_3    | resource   | google_kms_crypto_key_iam                                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  863 | CKV2_GCP_3    | resource   | google_kms_key_ring_iam                                                      | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  864 | CKV2_GCP_3    | resource   | google_spanner_database_iam                                                  | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  865 | CKV2_GCP_3    | resource   | google_compute_region_disk_resource_policy_attachment                        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  866 | CKV2_GCP_3    | resource   | google_compute_vpn_gateway                                                   | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  867 | CKV2_GCP_3    | resource   | google_logging_folder_bucket_config                                          | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  868 | CKV2_GCP_3    | resource   | google_endpoints_service_iam                                                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  869 | CKV2_GCP_3    | resource   | google_kms_key_ring_import_job                                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  870 | CKV2_GCP_3    | resource   | google_pubsub_topic_iam                                                      | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  871 | CKV2_GCP_3    | resource   | google_data_catalog_tag_template                                             | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  872 | CKV2_GCP_3    | resource   | google_dialogflow_entity_type                                                | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  873 | CKV2_GCP_3    | resource   | google_compute_global_forwarding_rule                                        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  874 | CKV2_GCP_3    | resource   | google_monitoring_slo                                                        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  875 | CKV2_GCP_3    | resource   | google_access_context_manager_access_policy                                  | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  876 | CKV2_GCP_3    | resource   | google_usage_export_bucket                                                   | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  877 | CKV2_GCP_3    | resource   | google_compute_route                                                         | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  878 | CKV2_GCP_3    | resource   | google_app_engine_service_split_traffic                                      | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  879 | CKV2_GCP_3    | resource   | google_kms_key_ring                                                          | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  880 | CKV2_GCP_3    | resource   | google_kms_crypto_key                                                        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  881 | CKV2_GCP_3    | resource   | google_logging_folder_sink                                                   | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  882 | CKV2_GCP_3    | resource   | google_compute_subnetwork_iam                                                | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  883 | CKV2_GCP_3    | resource   | google_storage_bucket                                                        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  884 | CKV2_GCP_3    | resource   | google_healthcare_dicom_store                                                | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  885 | CKV2_GCP_3    | resource   | google_container_analysis_occurrence                                         | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  886 | CKV2_GCP_3    | resource   | google_dataflow_flex_template_job                                            | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  887 | CKV2_GCP_3    | resource   | google_logging_billing_account_bucket_config                                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  888 | CKV2_GCP_3    | resource   | google_identity_platform_default_supported_idp_config                        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  889 | CKV2_GCP_3    | resource   | google_data_catalog_entry_group_iam                                          | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  890 | CKV2_GCP_3    | resource   | google_organization_iam_member                                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  891 | CKV2_GCP_3    | resource   | google_identity_platform_tenant_default_supported_idp_config                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  892 | CKV2_GCP_3    | resource   | google_storage_default_object_acl                                            | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  893 | CKV2_GCP_3    | resource   | google_logging_organization_exclusion                                        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  894 | CKV2_GCP_3    | resource   | google_cloud_asset_organization_feed                                         | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  895 | CKV2_GCP_3    | resource   | google_logging_billing_account_exclusion                                     | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  896 | CKV2_GCP_3    | resource   | google_compute_target_ssl_proxy                                              | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  897 | CKV2_GCP_3    | resource   | google_iap_web_type_app_engine_iam                                           | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  898 | CKV2_GCP_3    | resource   | google_compute_ssl_policy                                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  899 | CKV2_GCP_3    | resource   | google_healthcare_fhir_store_iam                                             | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  900 | CKV2_GCP_3    | resource   | google_endpoints_service                                                     | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  901 | CKV2_GCP_3    | resource   | google_storage_object_acl                                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  902 | CKV2_GCP_3    | resource   | google_compute_region_health_check                                           | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  903 | CKV2_GCP_3    | resource   | google_spanner_database                                                      | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  904 | CKV2_GCP_3    | resource   | google_compute_http_health_check                                             | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  905 | CKV2_GCP_3    | resource   | google_storage_transfer_job                                                  | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  906 | CKV2_GCP_3    | resource   | google_compute_instance_group                                                | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
-|  907 | CKV2_GCP_4    | resource   | google_storage_bucket                                                        | Ensure that retention policies on log buckets are configured using Bucket Lock                                                                                                                           | Terraform      |
-|  908 | CKV2_GCP_4    | resource   | google_logging_organization_sink                                             | Ensure that retention policies on log buckets are configured using Bucket Lock                                                                                                                           | Terraform      |
-|  909 | CKV2_GCP_4    | resource   | google_logging_project_sink                                                  | Ensure that retention policies on log buckets are configured using Bucket Lock                                                                                                                           | Terraform      |
-|  910 | CKV2_GCP_4    | resource   | google_logging_folder_sink                                                   | Ensure that retention policies on log buckets are configured using Bucket Lock                                                                                                                           | Terraform      |
+|  645 | CKV2_GCP_3    | resource   | google_access_context_manager_service_perimeter                              | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  646 | CKV2_GCP_3    | resource   | google_dataproc_job                                                          | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  647 | CKV2_GCP_3    | resource   | google_folder_iam_audit_config                                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  648 | CKV2_GCP_3    | resource   | google_project                                                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  649 | CKV2_GCP_3    | resource   | google_project_iam_member                                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  650 | CKV2_GCP_3    | resource   | google_container_cluster                                                     | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  651 | CKV2_GCP_3    | resource   | google_compute_autoscaler                                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  652 | CKV2_GCP_3    | resource   | google_storage_bucket                                                        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  653 | CKV2_GCP_3    | resource   | google_network_management_connectivity_test_resource                         | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  654 | CKV2_GCP_3    | resource   | google_logging_folder_bucket_config                                          | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  655 | CKV2_GCP_3    | resource   | google_organization_iam_custom_role                                          | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  656 | CKV2_GCP_3    | resource   | google_cloud_run_service_iam                                                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  657 | CKV2_GCP_3    | resource   | google_storage_bucket_iam_binding                                            | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  658 | CKV2_GCP_3    | resource   | google_container_analysis_occurrence                                         | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  659 | CKV2_GCP_3    | resource   | google_dataproc_cluster_iam                                                  | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  660 | CKV2_GCP_3    | resource   | google_datastore_index                                                       | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  661 | CKV2_GCP_3    | resource   | google_dialogflow_agent                                                      | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  662 | CKV2_GCP_3    | resource   | google_identity_platform_tenant_inbound_saml_config                          | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  663 | CKV2_GCP_3    | resource   | google_binary_authorization_attestor                                         | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  664 | CKV2_GCP_3    | resource   | google_pubsub_topic_iam                                                      | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  665 | CKV2_GCP_3    | resource   | google_resource_manager_lien                                                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  666 | CKV2_GCP_3    | resource   | google_compute_subnetwork                                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  667 | CKV2_GCP_3    | resource   | google_billing_account_iam_member                                            | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  668 | CKV2_GCP_3    | resource   | google_compute_vpn_gateway                                                   | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  669 | CKV2_GCP_3    | resource   | google_healthcare_dicom_store                                                | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  670 | CKV2_GCP_3    | resource   | google_container_registry                                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  671 | CKV2_GCP_3    | resource   | google_healthcare_dicom_store_iam                                            | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  672 | CKV2_GCP_3    | resource   | google_iap_client                                                            | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  673 | CKV2_GCP_3    | resource   | google_spanner_database_iam                                                  | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  674 | CKV2_GCP_3    | resource   | google_compute_target_ssl_proxy                                              | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  675 | CKV2_GCP_3    | resource   | google_pubsub_subscription                                                   | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  676 | CKV2_GCP_3    | resource   | google_compute_region_instance_group_manager                                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  677 | CKV2_GCP_3    | resource   | google_cloud_asset_project_feed                                              | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  678 | CKV2_GCP_3    | resource   | google_organization_policy                                                   | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  679 | CKV2_GCP_3    | resource   | google_composer_environment                                                  | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  680 | CKV2_GCP_3    | resource   | google_folder                                                                | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  681 | CKV2_GCP_3    | resource   | google_compute_region_target_https_proxy                                     | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  682 | CKV2_GCP_3    | resource   | google_data_catalog_entry_group_iam                                          | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  683 | CKV2_GCP_3    | resource   | google_identity_platform_tenant_oauth_idp_config                             | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  684 | CKV2_GCP_3    | resource   | google_compute_target_tcp_proxy                                              | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  685 | CKV2_GCP_3    | resource   | google_app_engine_firewall_rule                                              | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  686 | CKV2_GCP_3    | resource   | google_compute_region_ssl_certificate                                        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  687 | CKV2_GCP_3    | resource   | google_logging_billing_account_bucket_config                                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  688 | CKV2_GCP_3    | resource   | google_storage_default_object_acl                                            | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  689 | CKV2_GCP_3    | resource   | google_os_login_ssh_public_key                                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  690 | CKV2_GCP_3    | resource   | google_binary_authorization_policy                                           | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  691 | CKV2_GCP_3    | resource   | google_dataproc_autoscaling_policy                                           | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  692 | CKV2_GCP_3    | resource   | google_iap_app_engine_service_iam                                            | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  693 | CKV2_GCP_3    | resource   | google_compute_forwarding_rule                                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  694 | CKV2_GCP_3    | resource   | google_compute_target_http_proxy                                             | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  695 | CKV2_GCP_3    | resource   | google_compute_global_forwarding_rule                                        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  696 | CKV2_GCP_3    | resource   | google_compute_route                                                         | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  697 | CKV2_GCP_3    | resource   | google_sourcerepo_repository                                                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  698 | CKV2_GCP_3    | resource   | google_compute_region_url_map                                                | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  699 | CKV2_GCP_3    | resource   | google_dns_policy                                                            | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  700 | CKV2_GCP_3    | resource   | google_compute_backend_bucket_signed_url_key                                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  701 | CKV2_GCP_3    | resource   | google_secret_manager_secret                                                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  702 | CKV2_GCP_3    | resource   | google_bigquery_job                                                          | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  703 | CKV2_GCP_3    | resource   | google_compute_backend_service_signed_url_key                                | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  704 | CKV2_GCP_3    | resource   | google_monitoring_metric_descriptor                                          | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  705 | CKV2_GCP_3    | resource   | google_compute_network_peering                                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  706 | CKV2_GCP_3    | resource   | google_runtimeconfig_config_iam                                              | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  707 | CKV2_GCP_3    | resource   | google_storage_notification                                                  | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  708 | CKV2_GCP_3    | resource   | google_tpu_node                                                              | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  709 | CKV2_GCP_3    | resource   | google_organization_iam_audit_config                                         | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  710 | CKV2_GCP_3    | resource   | google_bigtable_app_profile                                                  | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  711 | CKV2_GCP_3    | resource   | google_logging_folder_exclusion                                              | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  712 | CKV2_GCP_3    | resource   | google_cloud_asset_folder_feed                                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  713 | CKV2_GCP_3    | resource   | google_compute_ssl_certificate                                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  714 | CKV2_GCP_3    | resource   | google_sql_ssl_cert                                                          | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  715 | CKV2_GCP_3    | resource   | google_iap_brand                                                             | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  716 | CKV2_GCP_3    | resource   | google_compute_snapshot                                                      | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  717 | CKV2_GCP_3    | resource   | google_compute_region_disk_resource_policy_attachment                        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  718 | CKV2_GCP_3    | resource   | google_storage_bucket_iam                                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  719 | CKV2_GCP_3    | resource   | google_cloudfunctions_function                                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  720 | CKV2_GCP_3    | resource   | google_healthcare_fhir_store_iam                                             | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  721 | CKV2_GCP_3    | resource   | google_logging_folder_sink                                                   | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  722 | CKV2_GCP_3    | resource   | google_sql_source_representation_instance                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  723 | CKV2_GCP_3    | resource   | google_data_catalog_tag                                                      | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  724 | CKV2_GCP_3    | resource   | google_dataflow_flex_template_job                                            | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  725 | CKV2_GCP_3    | resource   | google_active_directory_domain                                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  726 | CKV2_GCP_3    | resource   | google_sql_database_instance                                                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  727 | CKV2_GCP_3    | resource   | google_scc_source                                                            | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  728 | CKV2_GCP_3    | resource   | google_app_engine_application_url_dispatch_rules                             | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  729 | CKV2_GCP_3    | resource   | google_spanner_instance                                                      | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  730 | CKV2_GCP_3    | resource   | google_usage_export_bucket                                                   | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  731 | CKV2_GCP_3    | resource   | google_endpoints_service                                                     | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  732 | CKV2_GCP_3    | resource   | google_logging_organization_bucket_config                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  733 | CKV2_GCP_3    | resource   | google_folder_iam_binding                                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  734 | CKV2_GCP_3    | resource   | google_storage_bucket_acl                                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  735 | CKV2_GCP_3    | resource   | google_identity_platform_tenant                                              | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  736 | CKV2_GCP_3    | resource   | google_dataproc_cluster                                                      | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  737 | CKV2_GCP_3    | resource   | google_service_account_iam                                                   | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  738 | CKV2_GCP_3    | resource   | google_compute_node_template                                                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  739 | CKV2_GCP_3    | resource   | google_cloud_asset_organization_feed                                         | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  740 | CKV2_GCP_3    | resource   | google_compute_region_backend_service                                        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  741 | CKV2_GCP_3    | resource   | google_healthcare_dataset_iam                                                | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  742 | CKV2_GCP_3    | resource   | google_identity_platform_oauth_idp_config                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  743 | CKV2_GCP_3    | resource   | google_dataproc_job_iam                                                      | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  744 | CKV2_GCP_3    | resource   | google_compute_instance_iam                                                  | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  745 | CKV2_GCP_3    | resource   | google_os_config_patch_deployment                                            | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  746 | CKV2_GCP_3    | resource   | google_compute_shared_vpc_host_project                                       | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  747 | CKV2_GCP_3    | resource   | google_monitoring_alert_policy                                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  748 | CKV2_GCP_3    | resource   | google_compute_global_network_endpoint                                       | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  749 | CKV2_GCP_3    | resource   | google_compute_disk                                                          | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  750 | CKV2_GCP_3    | resource   | google_monitoring_notification_channel                                       | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  751 | CKV2_GCP_3    | resource   | google_sourcerepo_repository_iam                                             | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  752 | CKV2_GCP_3    | resource   | google_compute_global_network_endpoint_group                                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  753 | CKV2_GCP_3    | resource   | google_compute_address                                                       | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  754 | CKV2_GCP_3    | resource   | google_iap_tunnel_instance_iam                                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  755 | CKV2_GCP_3    | resource   | google_cloud_tasks_queue                                                     | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  756 | CKV2_GCP_3    | resource   | google_logging_billing_account_sink                                          | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  757 | CKV2_GCP_3    | resource   | google_ml_engine_model                                                       | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  758 | CKV2_GCP_3    | resource   | google_storage_hmac_key                                                      | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  759 | CKV2_GCP_3    | resource   | google_compute_node_group                                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  760 | CKV2_GCP_3    | resource   | google_compute_http_health_check                                             | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  761 | CKV2_GCP_3    | resource   | google_secret_manager_secret_version                                         | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  762 | CKV2_GCP_3    | resource   | google_cloudiot_device                                                       | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  763 | CKV2_GCP_3    | resource   | google_compute_shared_vpc_service_project                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  764 | CKV2_GCP_3    | resource   | google_bigquery_table                                                        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  765 | CKV2_GCP_3    | resource   | google_iap_web_iam                                                           | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  766 | CKV2_GCP_3    | resource   | google_storage_bucket_access_control                                         | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  767 | CKV2_GCP_3    | resource   | google_organization_iam_member                                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  768 | CKV2_GCP_3    | resource   | google_container_node_pool                                                   | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  769 | CKV2_GCP_3    | resource   | google_sql_user                                                              | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  770 | CKV2_GCP_3    | resource   | google_compute_global_address                                                | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  771 | CKV2_GCP_3    | resource   | google_compute_instance_group                                                | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  772 | CKV2_GCP_3    | resource   | google_compute_vpn_tunnel                                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  773 | CKV2_GCP_3    | resource   | google_monitoring_slo                                                        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  774 | CKV2_GCP_3    | resource   | google_healthcare_hl7_v2_store_iam                                           | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  775 | CKV2_GCP_3    | resource   | google_bigtable_instance_iam                                                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  776 | CKV2_GCP_3    | resource   | google_redis_instance                                                        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  777 | CKV2_GCP_3    | resource   | google_healthcare_fhir_store                                                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  778 | CKV2_GCP_3    | resource   | google_compute_instance                                                      | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  779 | CKV2_GCP_3    | resource   | google_spanner_instance_iam                                                  | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  780 | CKV2_GCP_3    | resource   | google_compute_region_disk                                                   | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  781 | CKV2_GCP_3    | resource   | google_service_account                                                       | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  782 | CKV2_GCP_3    | resource   | google_bigtable_gc_policy                                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  783 | CKV2_GCP_3    | resource   | google_kms_crypto_key_iam                                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  784 | CKV2_GCP_3    | resource   | google_bigtable_table                                                        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  785 | CKV2_GCP_3    | resource   | google_app_engine_application                                                | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  786 | CKV2_GCP_3    | resource   | google_compute_project_metadata                                              | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  787 | CKV2_GCP_3    | resource   | google_project_iam_custom_role                                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  788 | CKV2_GCP_3    | resource   | google_logging_billing_account_exclusion                                     | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  789 | CKV2_GCP_3    | resource   | google_compute_attached_disk                                                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  790 | CKV2_GCP_3    | resource   | google_compute_network_endpoint                                              | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  791 | CKV2_GCP_3    | resource   | google_access_context_manager_access_level                                   | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  792 | CKV2_GCP_3    | resource   | google_compute_instance_group_manager                                        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  793 | CKV2_GCP_3    | resource   | google_logging_organization_sink                                             | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  794 | CKV2_GCP_3    | resource   | google_compute_image                                                         | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  795 | CKV2_GCP_3    | resource   | google_storage_transfer_job                                                  | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  796 | CKV2_GCP_3    | resource   | google_bigquery_dataset_iam                                                  | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  797 | CKV2_GCP_3    | resource   | google_compute_reservation                                                   | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  798 | CKV2_GCP_3    | resource   | google_organization_iam_binding                                              | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  799 | CKV2_GCP_3    | resource   | google_cloud_scheduler_job                                                   | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  800 | CKV2_GCP_3    | resource   | google_identity_platform_tenant_default_supported_idp_config                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  801 | CKV2_GCP_3    | resource   | google_billing_account_iam_policy                                            | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  802 | CKV2_GCP_3    | resource   | google_folder_organization_policy                                            | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  803 | CKV2_GCP_3    | resource   | google_bigtable_instance                                                     | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  804 | CKV2_GCP_3    | resource   | google_deployment_manager_deployment                                         | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  805 | CKV2_GCP_3    | resource   | google_kms_secret_ciphertext                                                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  806 | CKV2_GCP_3    | resource   | google_kms_crypto_key                                                        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  807 | CKV2_GCP_3    | resource   | google_compute_router_nat                                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  808 | CKV2_GCP_3    | resource   | google_identity_platform_default_supported_idp_config                        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  809 | CKV2_GCP_3    | resource   | google_storage_object_acl                                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  810 | CKV2_GCP_3    | resource   | google_iap_web_type_compute_iam                                              | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  811 | CKV2_GCP_3    | resource   | google_compute_url_map                                                       | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  812 | CKV2_GCP_3    | resource   | google_compute_router                                                        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  813 | CKV2_GCP_3    | resource   | google_bigquery_data_transfer_config                                         | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  814 | CKV2_GCP_3    | resource   | google_compute_project_default_network_tier                                  | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  815 | CKV2_GCP_3    | resource   | google_spanner_database                                                      | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  816 | CKV2_GCP_3    | resource   | google_kms_key_ring_import_job                                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  817 | CKV2_GCP_3    | resource   | google_access_context_manager_service_perimeter_resource                     | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  818 | CKV2_GCP_3    | resource   | google_compute_region_health_check                                           | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  819 | CKV2_GCP_3    | resource   | google_compute_firewall                                                      | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  820 | CKV2_GCP_3    | resource   | google_iap_web_backend_service_iam                                           | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  821 | CKV2_GCP_3    | resource   | google_service_networking_connection                                         | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  822 | CKV2_GCP_3    | resource   | google_app_engine_domain_mapping                                             | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  823 | CKV2_GCP_3    | resource   | google_bigquery_dataset                                                      | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  824 | CKV2_GCP_3    | resource   | google_compute_network_endpoint_group                                        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  825 | CKV2_GCP_3    | resource   | google_healthcare_dataset                                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  826 | CKV2_GCP_3    | resource   | google_dns_managed_zone                                                      | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  827 | CKV2_GCP_3    | resource   | google_compute_disk_resource_policy_attachment                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  828 | CKV2_GCP_3    | resource   | google_secret_manager_secret_iam                                             | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  829 | CKV2_GCP_3    | resource   | google_storage_default_object_access_control                                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  830 | CKV2_GCP_3    | resource   | google_data_catalog_entry                                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  831 | CKV2_GCP_3    | resource   | google_compute_region_autoscaler                                             | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  832 | CKV2_GCP_3    | resource   | google_billing_account_iam_binding                                           | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  833 | CKV2_GCP_3    | resource   | google_monitoring_uptime_check_config                                        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  834 | CKV2_GCP_3    | resource   | google_endpoints_service_iam                                                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  835 | CKV2_GCP_3    | resource   | google_cloudfunctions_cloud_function_iam                                     | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  836 | CKV2_GCP_3    | resource   | google_compute_ssl_policy                                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  837 | CKV2_GCP_3    | resource   | google_dialogflow_intent                                                     | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  838 | CKV2_GCP_3    | resource   | google_compute_project_metadata_item                                         | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  839 | CKV2_GCP_3    | resource   | google_iap_web_type_app_engine_iam                                           | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  840 | CKV2_GCP_3    | resource   | google_project_iam                                                           | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  841 | CKV2_GCP_3    | resource   | google_organization_iam_policy                                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  842 | CKV2_GCP_3    | resource   | google_logging_project_exclusion                                             | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  843 | CKV2_GCP_3    | resource   | google_pubsub_topic                                                          | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  844 | CKV2_GCP_3    | resource   | google_identity_platform_inbound_saml_config                                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  845 | CKV2_GCP_3    | resource   | google_dataflow_job                                                          | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  846 | CKV2_GCP_3    | resource   | google_cloudbuild_trigger                                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  847 | CKV2_GCP_3    | resource   | google_monitoring_service                                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  848 | CKV2_GCP_3    | resource   | google_compute_network                                                       | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  849 | CKV2_GCP_3    | resource   | google_logging_project_bucket_config                                         | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  850 | CKV2_GCP_3    | resource   | google_compute_health_check                                                  | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  851 | CKV2_GCP_3    | resource   | google_compute_network_peering_routes_config                                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  852 | CKV2_GCP_3    | resource   | google_compute_backend_service                                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  853 | CKV2_GCP_3    | resource   | google_vpc_access_connector                                                  | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  854 | CKV2_GCP_3    | resource   | google_storage_bucket_iam_member                                             | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  855 | CKV2_GCP_3    | resource   | google_bigquery_dataset_access                                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  856 | CKV2_GCP_3    | resource   | google_logging_project_sink                                                  | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  857 | CKV2_GCP_3    | resource   | google_runtimeconfig_variable                                                | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  858 | CKV2_GCP_3    | resource   | google_compute_instance_from_template                                        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  859 | CKV2_GCP_3    | resource   | google_compute_router_interface                                              | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  860 | CKV2_GCP_3    | resource   | google_compute_subnetwork_iam                                                | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  861 | CKV2_GCP_3    | resource   | google_data_catalog_entry_group                                              | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  862 | CKV2_GCP_3    | resource   | google_dns_record_set                                                        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  863 | CKV2_GCP_3    | resource   | google_project_iam_binding                                                   | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  864 | CKV2_GCP_3    | resource   | google_logging_organization_exclusion                                        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  865 | CKV2_GCP_3    | resource   | google_kms_key_ring                                                          | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  866 | CKV2_GCP_3    | resource   | google_folder_iam_member                                                     | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  867 | CKV2_GCP_3    | resource   | google_compute_target_instance                                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  868 | CKV2_GCP_3    | resource   | google_compute_security_policy                                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  869 | CKV2_GCP_3    | resource   | google_project_organization_policy                                           | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  870 | CKV2_GCP_3    | resource   | google_compute_https_health_check                                            | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  871 | CKV2_GCP_3    | resource   | google_sql_database                                                          | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  872 | CKV2_GCP_3    | resource   | google_data_catalog_tag_template                                             | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  873 | CKV2_GCP_3    | resource   | google_compute_target_https_proxy                                            | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  874 | CKV2_GCP_3    | resource   | google_folder_iam_policy                                                     | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  875 | CKV2_GCP_3    | resource   | google_compute_instance_template                                             | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  876 | CKV2_GCP_3    | resource   | google_service_account_key                                                   | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  877 | CKV2_GCP_3    | resource   | google_logging_metric                                                        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  878 | CKV2_GCP_3    | resource   | google_kms_key_ring_iam                                                      | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  879 | CKV2_GCP_3    | resource   | google_access_context_manager_access_policy                                  | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  880 | CKV2_GCP_3    | resource   | google_compute_interconnect_attachment                                       | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  881 | CKV2_GCP_3    | resource   | google_compute_router_bgp_peer                                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  882 | CKV2_GCP_3    | resource   | google_project_service                                                       | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  883 | CKV2_GCP_3    | resource   | google_compute_target_pool                                                   | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  884 | CKV2_GCP_3    | resource   | google_binary_authorization_attestor_iam                                     | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  885 | CKV2_GCP_3    | resource   | google_app_engine_flexible_app_version                                       | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  886 | CKV2_GCP_3    | resource   | google_container_analysis_note                                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  887 | CKV2_GCP_3    | resource   | google_pubsub_subscription_iam                                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  888 | CKV2_GCP_3    | resource   | google_monitoring_dashboard                                                  | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  889 | CKV2_GCP_3    | resource   | google_dialogflow_entity_type                                                | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  890 | CKV2_GCP_3    | resource   | google_compute_instance_group_named_port                                     | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  891 | CKV2_GCP_3    | resource   | google_cloudiot_device_registry                                              | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  892 | CKV2_GCP_3    | resource   | google_storage_object_access_control                                         | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  893 | CKV2_GCP_3    | resource   | google_compute_backend_bucket                                                | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  894 | CKV2_GCP_3    | resource   | google_cloud_run_service                                                     | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  895 | CKV2_GCP_3    | resource   | google_compute_resource_policy                                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  896 | CKV2_GCP_3    | resource   | google_iap_app_engine_version_iam                                            | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  897 | CKV2_GCP_3    | resource   | google_firestore_index                                                       | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  898 | CKV2_GCP_3    | resource   | google_app_engine_service_split_traffic                                      | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  899 | CKV2_GCP_3    | resource   | google_app_engine_standard_app_version                                       | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  900 | CKV2_GCP_3    | resource   | google_cloud_run_domain_mapping                                              | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  901 | CKV2_GCP_3    | resource   | google_compute_region_target_http_proxy                                      | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  902 | CKV2_GCP_3    | resource   | google_runtimeconfig_config                                                  | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  903 | CKV2_GCP_3    | resource   | google_filestore_instance                                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  904 | CKV2_GCP_3    | resource   | google_healthcare_hl7_v2_store                                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  905 | CKV2_GCP_3    | resource   | google_storage_bucket_object                                                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  906 | CKV2_GCP_3    | resource   | google_monitoring_group                                                      | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform      |
+|  907 | CKV2_GCP_4    | resource   | google_logging_organization_sink                                             | Ensure that retention policies on log buckets are configured using Bucket Lock                                                                                                                           | Terraform      |
+|  908 | CKV2_GCP_4    | resource   | google_storage_bucket                                                        | Ensure that retention policies on log buckets are configured using Bucket Lock                                                                                                                           | Terraform      |
+|  909 | CKV2_GCP_4    | resource   | google_logging_folder_sink                                                   | Ensure that retention policies on log buckets are configured using Bucket Lock                                                                                                                           | Terraform      |
+|  910 | CKV2_GCP_4    | resource   | google_logging_project_sink                                                  | Ensure that retention policies on log buckets are configured using Bucket Lock                                                                                                                           | Terraform      |
 |  911 | CKV2_GCP_5    | resource   | google_project_iam_audit_config                                              | Ensure that Cloud Audit Logging is configured properly across all services and all users from a project                                                                                                  | Terraform      |
 |  912 | CKV2_GCP_5    | resource   | google_project                                                               | Ensure that Cloud Audit Logging is configured properly across all services and all users from a project                                                                                                  | Terraform      |
-|  913 | CKV2_GCP_6    | resource   | google_kms_crypto_key                                                        | Ensure that Cloud KMS cryptokeys are not anonymously or publicly accessible                                                                                                                              | Terraform      |
-|  914 | CKV2_GCP_6    | resource   | google_kms_crypto_key_iam_member                                             | Ensure that Cloud KMS cryptokeys are not anonymously or publicly accessible                                                                                                                              | Terraform      |
-|  915 | CKV2_GCP_6    | resource   | google_kms_crypto_key_iam_binding                                            | Ensure that Cloud KMS cryptokeys are not anonymously or publicly accessible                                                                                                                              | Terraform      |
-|  916 | CKV2_GCP_7    | resource   | google_sql_database_instance                                                 | Ensure that a MySQL database instance does not allow anyone to connect with administrative privileges                                                                                                    | Terraform      |
-|  917 | CKV2_GCP_7    | resource   | google_sql_user                                                              | Ensure that a MySQL database instance does not allow anyone to connect with administrative privileges                                                                                                    | Terraform      |
+|  913 | CKV2_GCP_6    | resource   | google_kms_crypto_key_iam_member                                             | Ensure that Cloud KMS cryptokeys are not anonymously or publicly accessible                                                                                                                              | Terraform      |
+|  914 | CKV2_GCP_6    | resource   | google_kms_crypto_key_iam_binding                                            | Ensure that Cloud KMS cryptokeys are not anonymously or publicly accessible                                                                                                                              | Terraform      |
+|  915 | CKV2_GCP_6    | resource   | google_kms_crypto_key                                                        | Ensure that Cloud KMS cryptokeys are not anonymously or publicly accessible                                                                                                                              | Terraform      |
+|  916 | CKV2_GCP_7    | resource   | google_sql_user                                                              | Ensure that a MySQL database instance does not allow anyone to connect with administrative privileges                                                                                                    | Terraform      |
+|  917 | CKV2_GCP_7    | resource   | google_sql_database_instance                                                 | Ensure that a MySQL database instance does not allow anyone to connect with administrative privileges                                                                                                    | Terraform      |
 |  918 | CKV_GIT_1     | resource   | github_repository                                                            | Ensure Repository is Private                                                                                                                                                                             | Terraform      |
 |  919 | CKV_K8S_1     | resource   | PodSecurityPolicy                                                            | Do not admit containers wishing to share the host process ID namespace                                                                                                                                   | Kubernetes     |
 |  920 | CKV_K8S_2     | resource   | PodSecurityPolicy                                                            | Do not admit privileged containers                                                                                                                                                                       | Kubernetes     |
diff --git a/docs/5.Policy Index/terraform.md b/docs/5.Policy Index/terraform.md
index cf0230a3f..95865afbc 100644
--- a/docs/5.Policy Index/terraform.md
+++ b/docs/5.Policy Index/terraform.md
@@ -183,19 +183,19 @@ nav_order: 1
 | 172 | CKV_AWS_152   | resource | aws_lb                                                       | Ensure that Load Balancer (Network/Gateway) has cross-zone load balancing enabled                                                                                                                        | Terraform |
 | 173 | CKV_AWS_152   | resource | aws_alb                                                      | Ensure that Load Balancer (Network/Gateway) has cross-zone load balancing enabled                                                                                                                        | Terraform |
 | 174 | CKV_AWS_153   | resource | aws_autoscaling_group                                        | Autoscaling groups should supply tags to launch configurations                                                                                                                                           | Terraform |
-| 175 | CKV2_AWS_1    | resource | aws_subnet                                                   | Ensure that all NACL are attached to subnets                                                                                                                                                             | Terraform |
-| 176 | CKV2_AWS_1    | resource | aws_network_acl                                              | Ensure that all NACL are attached to subnets                                                                                                                                                             | Terraform |
+| 175 | CKV2_AWS_1    | resource | aws_network_acl                                              | Ensure that all NACL are attached to subnets                                                                                                                                                             | Terraform |
+| 176 | CKV2_AWS_1    | resource | aws_subnet                                                   | Ensure that all NACL are attached to subnets                                                                                                                                                             | Terraform |
 | 177 | CKV2_AWS_2    | resource | aws_ebs_volume                                               | Ensure that only encrypted EBS volumes are attached to EC2 instances                                                                                                                                     | Terraform |
 | 178 | CKV2_AWS_2    | resource | aws_volume_attachment                                        | Ensure that only encrypted EBS volumes are attached to EC2 instances                                                                                                                                     | Terraform |
-| 179 | CKV2_AWS_3    | resource | aws_guardduty_detector                                       | Ensure GuardDuty is enbaled to specific org/region                                                                                                                                                       | Terraform |
-| 180 | CKV2_AWS_3    | resource | aws_guardduty_organization_configuration                     | Ensure GuardDuty is enbaled to specific org/region                                                                                                                                                       | Terraform |
-| 181 | CKV2_AWS_4    | resource | aws_api_gateway_method_settings                              | Ensure API Gateway stage have logging level defined as appropiate                                                                                                                                        | Terraform |
-| 182 | CKV2_AWS_4    | resource | aws_api_gateway_stage                                        | Ensure API Gateway stage have logging level defined as appropiate                                                                                                                                        | Terraform |
+| 179 | CKV2_AWS_3    | resource | aws_guardduty_organization_configuration                     | Ensure GuardDuty is enbaled to specific org/region                                                                                                                                                       | Terraform |
+| 180 | CKV2_AWS_3    | resource | aws_guardduty_detector                                       | Ensure GuardDuty is enbaled to specific org/region                                                                                                                                                       | Terraform |
+| 181 | CKV2_AWS_4    | resource | aws_api_gateway_stage                                        | Ensure API Gateway stage have logging level defined as appropiate                                                                                                                                        | Terraform |
+| 182 | CKV2_AWS_4    | resource | aws_api_gateway_method_settings                              | Ensure API Gateway stage have logging level defined as appropiate                                                                                                                                        | Terraform |
 | 183 | CKV2_AWS_5    | resource | aws_security_group                                           | Ensure that Security Groups are attached to EC2 instances or elastic network interfaces (ENIs)                                                                                                           | Terraform |
 | 184 | CKV2_AWS_6    | resource | aws_s3_bucket_public_access_block                            | Ensure that S3 bucket has a Public Access block                                                                                                                                                          | Terraform |
 | 185 | CKV2_AWS_6    | resource | aws_s3_bucket                                                | Ensure that S3 bucket has a Public Access block                                                                                                                                                          | Terraform |
-| 186 | CKV2_AWS_7    | resource | aws_security_group                                           | Ensure that Amazon EMR clusters' security groups are not open to the world                                                                                                                               | Terraform |
-| 187 | CKV2_AWS_7    | resource | aws_emr_cluster                                              | Ensure that Amazon EMR clusters' security groups are not open to the world                                                                                                                               | Terraform |
+| 186 | CKV2_AWS_7    | resource | aws_emr_cluster                                              | Ensure that Amazon EMR clusters' security groups are not open to the world                                                                                                                               | Terraform |
+| 187 | CKV2_AWS_7    | resource | aws_security_group                                           | Ensure that Amazon EMR clusters' security groups are not open to the world                                                                                                                               | Terraform |
 | 188 | CKV2_AWS_8    | resource | aws_rds_cluster                                              | Ensure that RDS clusters has backup plan of AWS Backup                                                                                                                                                   | Terraform |
 | 189 | CKV2_AWS_9    | resource | aws_backup_selection                                         | Ensure that EBS are added in the backup plans of AWS Backup                                                                                                                                              | Terraform |
 | 190 | CKV2_AWS_10   | resource | aws_cloudtrail                                               | Ensure CloudTrail trails are integrated with CloudWatch Logs                                                                                                                                             | Terraform |
@@ -205,17 +205,17 @@ nav_order: 1
 | 194 | CKV2_AWS_13   | resource | aws_redshift_cluster                                         | Ensure that Redshift clusters has backup plan of AWS Backup                                                                                                                                              | Terraform |
 | 195 | CKV2_AWS_14   | resource | aws_iam_group                                                | Ensure that IAM groups includes at least one IAM user                                                                                                                                                    | Terraform |
 | 196 | CKV2_AWS_14   | resource | aws_iam_group_membership                                     | Ensure that IAM groups includes at least one IAM user                                                                                                                                                    | Terraform |
-| 197 | CKV2_AWS_15   | resource | aws_autoscaling_group                                        | Ensure that auto Scaling groups that are associated with a load balancer are using Elastic Load Balancing health checks.                                                                                 | Terraform |
-| 198 | CKV2_AWS_15   | resource | aws_elb                                                      | Ensure that auto Scaling groups that are associated with a load balancer are using Elastic Load Balancing health checks.                                                                                 | Terraform |
+| 197 | CKV2_AWS_15   | resource | aws_elb                                                      | Ensure that auto Scaling groups that are associated with a load balancer are using Elastic Load Balancing health checks.                                                                                 | Terraform |
+| 198 | CKV2_AWS_15   | resource | aws_autoscaling_group                                        | Ensure that auto Scaling groups that are associated with a load balancer are using Elastic Load Balancing health checks.                                                                                 | Terraform |
 | 199 | CKV2_AWS_16   | resource | aws_appautoscaling_policy                                    | Ensure that Auto Scaling is enabled on your DynamoDB tables                                                                                                                                              | Terraform |
 | 200 | CKV2_AWS_16   | resource | aws_appautoscaling_target                                    | Ensure that Auto Scaling is enabled on your DynamoDB tables                                                                                                                                              | Terraform |
-| 201 | CKV2_AWS_17   | resource | aws_subnet                                                   | Ensure that EC2 instances belong to a VPC                                                                                                                                                                | Terraform |
-| 202 | CKV2_AWS_17   | resource | aws_network_interface                                        | Ensure that EC2 instances belong to a VPC                                                                                                                                                                | Terraform |
+| 201 | CKV2_AWS_17   | resource | aws_network_interface                                        | Ensure that EC2 instances belong to a VPC                                                                                                                                                                | Terraform |
+| 202 | CKV2_AWS_17   | resource | aws_subnet                                                   | Ensure that EC2 instances belong to a VPC                                                                                                                                                                | Terraform |
 | 203 | CKV2_AWS_17   | resource | aws_instance                                                 | Ensure that EC2 instances belong to a VPC                                                                                                                                                                | Terraform |
 | 204 | CKV2_AWS_18   | resource | aws_backup_selection                                         | Ensure that Elastic File System (Amazon EFS) file systems are added in the backup plans of AWS Backup                                                                                                    | Terraform |
 | 205 | CKV2_AWS_19   | resource | aws_eip                                                      | Ensure that all EIP addresses allocated to a VPC are attached to EC2 instances                                                                                                                           | Terraform |
-| 206 | CKV2_AWS_20   | resource | aws_lb_listener                                              | Ensure that ALB redirects HTTP requests into HTTPS ones                                                                                                                                                  | Terraform |
-| 207 | CKV2_AWS_20   | resource | aws_lb                                                       | Ensure that ALB redirects HTTP requests into HTTPS ones                                                                                                                                                  | Terraform |
+| 206 | CKV2_AWS_20   | resource | aws_lb                                                       | Ensure that ALB redirects HTTP requests into HTTPS ones                                                                                                                                                  | Terraform |
+| 207 | CKV2_AWS_20   | resource | aws_lb_listener                                              | Ensure that ALB redirects HTTP requests into HTTPS ones                                                                                                                                                  | Terraform |
 | 208 | CKV2_AWS_21   | resource | aws_iam_group_membership                                     | Ensure that all IAM users are members of at least one IAM group.                                                                                                                                         | Terraform |
 | 209 | CKV_AZURE_1   | resource | azurerm_linux_virtual_machine                                | Ensure Azure Instance does not use basic authentication(Use SSH Key Instead)                                                                                                                             | Terraform |
 | 210 | CKV_AZURE_1   | resource | azurerm_virtual_machine                                      | Ensure Azure Instance does not use basic authentication(Use SSH Key Instead)                                                                                                                             | Terraform |
@@ -376,11 +376,11 @@ nav_order: 1
 | 365 | CKV2_AZURE_5  | resource | azurerm_mssql_server_security_alert_policy                   | Ensure that VA setting 'Also send email notifications to admins and subscription owners' is set for a SQL server                                                                                         | Terraform |
 | 366 | CKV2_AZURE_5  | resource | azurerm_mssql_server_vulnerability_assessment                | Ensure that VA setting 'Also send email notifications to admins and subscription owners' is set for a SQL server                                                                                         | Terraform |
 | 367 | CKV2_AZURE_5  | resource | azurerm_sql_server                                           | Ensure that VA setting 'Also send email notifications to admins and subscription owners' is set for a SQL server                                                                                         | Terraform |
-| 368 | CKV2_AZURE_6  | resource | azurerm_sql_firewall_rule                                    | Ensure 'Allow access to Azure services' for PostgreSQL Database Server is disabled                                                                                                                       | Terraform |
-| 369 | CKV2_AZURE_6  | resource | azurerm_sql_server                                           | Ensure 'Allow access to Azure services' for PostgreSQL Database Server is disabled                                                                                                                       | Terraform |
+| 368 | CKV2_AZURE_6  | resource | azurerm_sql_server                                           | Ensure 'Allow access to Azure services' for PostgreSQL Database Server is disabled                                                                                                                       | Terraform |
+| 369 | CKV2_AZURE_6  | resource | azurerm_sql_firewall_rule                                    | Ensure 'Allow access to Azure services' for PostgreSQL Database Server is disabled                                                                                                                       | Terraform |
 | 370 | CKV2_AZURE_7  | resource | azurerm_sql_server                                           | Ensure that Azure Active Directory Admin is configured                                                                                                                                                   | Terraform |
-| 371 | CKV2_AZURE_8  | resource | azurerm_monitor_activity_log_alert                           | Ensure the storage container storing the activity logs is not publicly accessible                                                                                                                        | Terraform |
-| 372 | CKV2_AZURE_8  | resource | azurerm_storage_container                                    | Ensure the storage container storing the activity logs is not publicly accessible                                                                                                                        | Terraform |
+| 371 | CKV2_AZURE_8  | resource | azurerm_storage_container                                    | Ensure the storage container storing the activity logs is not publicly accessible                                                                                                                        | Terraform |
+| 372 | CKV2_AZURE_8  | resource | azurerm_monitor_activity_log_alert                           | Ensure the storage container storing the activity logs is not publicly accessible                                                                                                                        | Terraform |
 | 373 | CKV2_AZURE_9  | resource | azurerm_virtual_machine                                      | Ensure Virtual Machines are utilizing Managed Disks                                                                                                                                                      | Terraform |
 | 374 | CKV2_AZURE_10 | resource | azurerm_virtual_machine                                      | Ensure that Microsoft Antimalware is configured to automatically updates for Virtual Machines                                                                                                            | Terraform |
 | 375 | CKV2_AZURE_10 | resource | azurerm_virtual_machine_extension                            | Ensure that Microsoft Antimalware is configured to automatically updates for Virtual Machines                                                                                                            | Terraform |
@@ -388,19 +388,19 @@ nav_order: 1
 | 377 | CKV2_AZURE_12 | resource | azurerm_virtual_machine                                      | Ensure that virtual machines are backed up using Azure Backup                                                                                                                                            | Terraform |
 | 378 | CKV2_AZURE_13 | resource | azurerm_mssql_server_security_alert_policy                   | Ensure that sql servers enables data security policy                                                                                                                                                     | Terraform |
 | 379 | CKV2_AZURE_13 | resource | azurerm_sql_server                                           | Ensure that sql servers enables data security policy                                                                                                                                                     | Terraform |
-| 380 | CKV2_AZURE_14 | resource | azurerm_virtual_machine                                      | Ensure that Unattached disks are encrypted                                                                                                                                                               | Terraform |
-| 381 | CKV2_AZURE_14 | resource | azurerm_managed_disk                                         | Ensure that Unattached disks are encrypted                                                                                                                                                               | Terraform |
+| 380 | CKV2_AZURE_14 | resource | azurerm_managed_disk                                         | Ensure that Unattached disks are encrypted                                                                                                                                                               | Terraform |
+| 381 | CKV2_AZURE_14 | resource | azurerm_virtual_machine                                      | Ensure that Unattached disks are encrypted                                                                                                                                                               | Terraform |
 | 382 | CKV2_AZURE_15 | resource | azurerm_data_factory                                         | Ensure that Azure data factories are encrypted with a customer-managed key                                                                                                                               | Terraform |
 | 383 | CKV2_AZURE_16 | resource | azurerm_mysql_server_key                                     | Ensure that MySQL server enables customer-managed key for encryption                                                                                                                                     | Terraform |
 | 384 | CKV2_AZURE_16 | resource | azurerm_mysql_server                                         | Ensure that MySQL server enables customer-managed key for encryption                                                                                                                                     | Terraform |
-| 385 | CKV2_AZURE_17 | resource | azurerm_postgresql_server                                    | Ensure that PostgreSQL server enables customer-managed key for encryption                                                                                                                                | Terraform |
-| 386 | CKV2_AZURE_17 | resource | azurerm_postgresql_server_key                                | Ensure that PostgreSQL server enables customer-managed key for encryption                                                                                                                                | Terraform |
+| 385 | CKV2_AZURE_17 | resource | azurerm_postgresql_server_key                                | Ensure that PostgreSQL server enables customer-managed key for encryption                                                                                                                                | Terraform |
+| 386 | CKV2_AZURE_17 | resource | azurerm_postgresql_server                                    | Ensure that PostgreSQL server enables customer-managed key for encryption                                                                                                                                | Terraform |
 | 387 | CKV2_AZURE_18 | resource | azurerm_storage_account                                      | Ensure that Storage Accounts use customer-managed key for encryption                                                                                                                                     | Terraform |
 | 388 | CKV2_AZURE_18 | resource | azurerm_storage_account_customer_managed_key                 | Ensure that Storage Accounts use customer-managed key for encryption                                                                                                                                     | Terraform |
 | 389 | CKV2_AZURE_19 | resource | azurerm_synapse_workspace                                    | Ensure that Azure Synapse workspaces have no IP firewall rules attached                                                                                                                                  | Terraform |
 | 390 | CKV2_AZURE_20 | resource | azurerm_log_analytics_storage_insights                       | Ensure Storage logging is enabled for Table service for read requests                                                                                                                                    | Terraform |
-| 391 | CKV2_AZURE_20 | resource | azurerm_storage_table                                        | Ensure Storage logging is enabled for Table service for read requests                                                                                                                                    | Terraform |
-| 392 | CKV2_AZURE_20 | resource | azurerm_storage_account                                      | Ensure Storage logging is enabled for Table service for read requests                                                                                                                                    | Terraform |
+| 391 | CKV2_AZURE_20 | resource | azurerm_storage_account                                      | Ensure Storage logging is enabled for Table service for read requests                                                                                                                                    | Terraform |
+| 392 | CKV2_AZURE_20 | resource | azurerm_storage_table                                        | Ensure Storage logging is enabled for Table service for read requests                                                                                                                                    | Terraform |
 | 393 | CKV2_AZURE_21 | resource | azurerm_log_analytics_storage_insights                       | Ensure Storage logging is enabled for Blob service for read requests                                                                                                                                     | Terraform |
 | 394 | CKV2_AZURE_21 | resource | azurerm_storage_account                                      | Ensure Storage logging is enabled for Blob service for read requests                                                                                                                                     | Terraform |
 | 395 | CKV2_AZURE_21 | resource | azurerm_storage_container                                    | Ensure Storage logging is enabled for Blob service for read requests                                                                                                                                     | Terraform |
@@ -488,279 +488,279 @@ nav_order: 1
 | 477 | CKV_GCP_72    | resource | google_container_cluster                                     | Ensure Integrity Monitoring for Shielded GKE Nodes is Enabled                                                                                                                                            | Terraform |
 | 478 | CKV2_GCP_1    | resource | google_project_default_service_accounts                      | Ensure GKE clusters are not running using the Compute Engine default service account                                                                                                                     | Terraform |
 | 479 | CKV2_GCP_2    | resource | google_compute_network                                       | Ensure legacy networks do not exist for a project                                                                                                                                                        | Terraform |
-| 480 | CKV2_GCP_3    | resource | google_iap_web_backend_service_iam                           | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 481 | CKV2_GCP_3    | resource | google_spanner_instance                                      | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 482 | CKV2_GCP_3    | resource | google_compute_security_policy                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 483 | CKV2_GCP_3    | resource | google_monitoring_dashboard                                  | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 484 | CKV2_GCP_3    | resource | google_monitoring_notification_channel                       | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 485 | CKV2_GCP_3    | resource | google_healthcare_hl7_v2_store                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 486 | CKV2_GCP_3    | resource | google_kms_crypto_key                                        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 487 | CKV2_GCP_3    | resource | google_kms_crypto_key_iam                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 488 | CKV2_GCP_3    | resource | google_compute_backend_bucket_signed_url_key                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 489 | CKV2_GCP_3    | resource | google_compute_autoscaler                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 490 | CKV2_GCP_3    | resource | google_folder_organization_policy                            | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 491 | CKV2_GCP_3    | resource | google_compute_region_disk_resource_policy_attachment        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 492 | CKV2_GCP_3    | resource | google_compute_region_autoscaler                             | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 493 | CKV2_GCP_3    | resource | google_folder_iam_binding                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 494 | CKV2_GCP_3    | resource | google_compute_node_group                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 495 | CKV2_GCP_3    | resource | google_data_catalog_entry_group                              | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 496 | CKV2_GCP_3    | resource | google_container_analysis_note                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 497 | CKV2_GCP_3    | resource | google_bigtable_app_profile                                  | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 498 | CKV2_GCP_3    | resource | google_compute_instance                                      | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 499 | CKV2_GCP_3    | resource | google_service_networking_connection                         | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 500 | CKV2_GCP_3    | resource | google_compute_network_endpoint_group                        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 501 | CKV2_GCP_3    | resource | google_compute_region_target_http_proxy                      | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 502 | CKV2_GCP_3    | resource | google_compute_instance_group                                | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 503 | CKV2_GCP_3    | resource | google_compute_route                                         | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 504 | CKV2_GCP_3    | resource | google_bigquery_dataset_access                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 505 | CKV2_GCP_3    | resource | google_logging_project_exclusion                             | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 506 | CKV2_GCP_3    | resource | google_compute_region_backend_service                        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 507 | CKV2_GCP_3    | resource | google_compute_image                                         | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 508 | CKV2_GCP_3    | resource | google_compute_backend_service                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 509 | CKV2_GCP_3    | resource | google_folder_iam_audit_config                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 510 | CKV2_GCP_3    | resource | google_storage_bucket_access_control                         | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 511 | CKV2_GCP_3    | resource | google_endpoints_service_iam                                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 512 | CKV2_GCP_3    | resource | google_organization_iam_policy                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 513 | CKV2_GCP_3    | resource | google_compute_target_https_proxy                            | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 514 | CKV2_GCP_3    | resource | google_data_catalog_tag_template                             | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 515 | CKV2_GCP_3    | resource | google_firestore_index                                       | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 516 | CKV2_GCP_3    | resource | google_compute_region_url_map                                | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 517 | CKV2_GCP_3    | resource | google_compute_ssl_certificate                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 518 | CKV2_GCP_3    | resource | google_logging_billing_account_sink                          | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 519 | CKV2_GCP_3    | resource | google_compute_network_endpoint                              | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 520 | CKV2_GCP_3    | resource | google_app_engine_firewall_rule                              | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 521 | CKV2_GCP_3    | resource | google_cloud_asset_organization_feed                         | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 522 | CKV2_GCP_3    | resource | google_logging_metric                                        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 523 | CKV2_GCP_3    | resource | google_cloud_scheduler_job                                   | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 524 | CKV2_GCP_3    | resource | google_storage_bucket_object                                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 525 | CKV2_GCP_3    | resource | google_healthcare_dataset_iam                                | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 526 | CKV2_GCP_3    | resource | google_compute_node_template                                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 527 | CKV2_GCP_3    | resource | google_os_config_patch_deployment                            | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 528 | CKV2_GCP_3    | resource | google_billing_account_iam_policy                            | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 529 | CKV2_GCP_3    | resource | google_compute_region_instance_group_manager                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 530 | CKV2_GCP_3    | resource | google_dialogflow_agent                                      | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 531 | CKV2_GCP_3    | resource | google_project_iam_binding                                   | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 532 | CKV2_GCP_3    | resource | google_identity_platform_oauth_idp_config                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 533 | CKV2_GCP_3    | resource | google_sql_database_instance                                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 534 | CKV2_GCP_3    | resource | google_runtimeconfig_variable                                | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 535 | CKV2_GCP_3    | resource | google_secret_manager_secret                                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 536 | CKV2_GCP_3    | resource | google_logging_billing_account_bucket_config                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 537 | CKV2_GCP_3    | resource | google_binary_authorization_attestor                         | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 538 | CKV2_GCP_3    | resource | google_spanner_instance_iam                                  | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 539 | CKV2_GCP_3    | resource | google_compute_project_default_network_tier                  | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 540 | CKV2_GCP_3    | resource | google_secret_manager_secret_iam                             | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 541 | CKV2_GCP_3    | resource | google_network_management_connectivity_test_resource         | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 542 | CKV2_GCP_3    | resource | google_storage_object_access_control                         | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 543 | CKV2_GCP_3    | resource | google_compute_disk_resource_policy_attachment               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 544 | CKV2_GCP_3    | resource | google_bigquery_table                                        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 545 | CKV2_GCP_3    | resource | google_service_account_iam                                   | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 546 | CKV2_GCP_3    | resource | google_sql_ssl_cert                                          | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 547 | CKV2_GCP_3    | resource | google_compute_region_target_https_proxy                     | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 548 | CKV2_GCP_3    | resource | google_sql_user                                              | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 549 | CKV2_GCP_3    | resource | google_access_context_manager_service_perimeter_resource     | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 550 | CKV2_GCP_3    | resource | google_cloud_run_service_iam                                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 551 | CKV2_GCP_3    | resource | google_compute_http_health_check                             | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 552 | CKV2_GCP_3    | resource | google_compute_vpn_tunnel                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 553 | CKV2_GCP_3    | resource | google_dns_policy                                            | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 554 | CKV2_GCP_3    | resource | google_healthcare_fhir_store                                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 555 | CKV2_GCP_3    | resource | google_sourcerepo_repository_iam                             | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 556 | CKV2_GCP_3    | resource | google_compute_target_pool                                   | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 557 | CKV2_GCP_3    | resource | google_runtimeconfig_config                                  | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 558 | CKV2_GCP_3    | resource | google_dataproc_cluster_iam                                  | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 559 | CKV2_GCP_3    | resource | google_logging_folder_exclusion                              | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 560 | CKV2_GCP_3    | resource | google_bigquery_job                                          | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 561 | CKV2_GCP_3    | resource | google_bigquery_dataset                                      | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 562 | CKV2_GCP_3    | resource | google_monitoring_uptime_check_config                        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 563 | CKV2_GCP_3    | resource | google_service_account                                       | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 564 | CKV2_GCP_3    | resource | google_compute_interconnect_attachment                       | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 565 | CKV2_GCP_3    | resource | google_compute_network                                       | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 566 | CKV2_GCP_3    | resource | google_compute_subnetwork                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 567 | CKV2_GCP_3    | resource | google_app_engine_application_url_dispatch_rules             | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 568 | CKV2_GCP_3    | resource | google_compute_vpn_gateway                                   | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 569 | CKV2_GCP_3    | resource | google_iap_tunnel_instance_iam                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 570 | CKV2_GCP_3    | resource | google_billing_account_iam_member                            | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 571 | CKV2_GCP_3    | resource | google_compute_instance_group_manager                        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 572 | CKV2_GCP_3    | resource | google_iap_web_type_app_engine_iam                           | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 573 | CKV2_GCP_3    | resource | google_compute_instance_group_named_port                     | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 574 | CKV2_GCP_3    | resource | google_healthcare_dataset                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 575 | CKV2_GCP_3    | resource | google_dns_record_set                                        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 576 | CKV2_GCP_3    | resource | google_dataproc_job_iam                                      | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 577 | CKV2_GCP_3    | resource | google_monitoring_service                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 578 | CKV2_GCP_3    | resource | google_data_catalog_tag                                      | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 579 | CKV2_GCP_3    | resource | google_cloud_asset_project_feed                              | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 580 | CKV2_GCP_3    | resource | google_dialogflow_entity_type                                | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 581 | CKV2_GCP_3    | resource | google_storage_bucket                                        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 582 | CKV2_GCP_3    | resource | google_sql_database                                          | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 583 | CKV2_GCP_3    | resource | google_ml_engine_model                                       | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 584 | CKV2_GCP_3    | resource | google_monitoring_group                                      | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 585 | CKV2_GCP_3    | resource | google_os_login_ssh_public_key                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 586 | CKV2_GCP_3    | resource | google_compute_project_metadata_item                         | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 587 | CKV2_GCP_3    | resource | google_compute_project_metadata                              | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 588 | CKV2_GCP_3    | resource | google_access_context_manager_access_policy                  | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 589 | CKV2_GCP_3    | resource | google_app_engine_standard_app_version                       | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 590 | CKV2_GCP_3    | resource | google_compute_forwarding_rule                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 591 | CKV2_GCP_3    | resource | google_secret_manager_secret_version                         | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 592 | CKV2_GCP_3    | resource | google_organization_policy                                   | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 593 | CKV2_GCP_3    | resource | google_logging_organization_exclusion                        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 594 | CKV2_GCP_3    | resource | google_logging_organization_bucket_config                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 595 | CKV2_GCP_3    | resource | google_compute_region_disk                                   | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 596 | CKV2_GCP_3    | resource | google_identity_platform_default_supported_idp_config        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 597 | CKV2_GCP_3    | resource | google_vpc_access_connector                                  | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 598 | CKV2_GCP_3    | resource | google_bigquery_data_transfer_config                         | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 599 | CKV2_GCP_3    | resource | google_logging_organization_sink                             | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 600 | CKV2_GCP_3    | resource | google_compute_target_ssl_proxy                              | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 601 | CKV2_GCP_3    | resource | google_monitoring_slo                                        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 602 | CKV2_GCP_3    | resource | google_iap_app_engine_version_iam                            | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 603 | CKV2_GCP_3    | resource | google_identity_platform_tenant_oauth_idp_config             | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 604 | CKV2_GCP_3    | resource | google_data_catalog_entry                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 605 | CKV2_GCP_3    | resource | google_tpu_node                                              | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 606 | CKV2_GCP_3    | resource | google_filestore_instance                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 607 | CKV2_GCP_3    | resource | google_identity_platform_tenant_inbound_saml_config          | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 608 | CKV2_GCP_3    | resource | google_healthcare_dicom_store_iam                            | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 609 | CKV2_GCP_3    | resource | google_logging_folder_sink                                   | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 610 | CKV2_GCP_3    | resource | google_container_cluster                                     | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 611 | CKV2_GCP_3    | resource | google_binary_authorization_policy                           | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 612 | CKV2_GCP_3    | resource | google_project                                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 613 | CKV2_GCP_3    | resource | google_data_catalog_entry_group_iam                          | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 614 | CKV2_GCP_3    | resource | google_storage_object_acl                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 615 | CKV2_GCP_3    | resource | google_spanner_database_iam                                  | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 616 | CKV2_GCP_3    | resource | google_compute_disk                                          | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 617 | CKV2_GCP_3    | resource | google_compute_target_http_proxy                             | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 618 | CKV2_GCP_3    | resource | google_app_engine_domain_mapping                             | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 619 | CKV2_GCP_3    | resource | google_storage_transfer_job                                  | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 620 | CKV2_GCP_3    | resource | google_compute_attached_disk                                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 621 | CKV2_GCP_3    | resource | google_compute_region_ssl_certificate                        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 622 | CKV2_GCP_3    | resource | google_compute_firewall                                      | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 623 | CKV2_GCP_3    | resource | google_dataproc_cluster                                      | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 624 | CKV2_GCP_3    | resource | google_app_engine_application                                | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 625 | CKV2_GCP_3    | resource | google_dataflow_job                                          | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 626 | CKV2_GCP_3    | resource | google_project_iam_custom_role                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 627 | CKV2_GCP_3    | resource | google_compute_global_address                                | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 628 | CKV2_GCP_3    | resource | google_billing_account_iam_binding                           | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 629 | CKV2_GCP_3    | resource | google_folder                                                | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 630 | CKV2_GCP_3    | resource | google_service_account_key                                   | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 631 | CKV2_GCP_3    | resource | google_compute_global_forwarding_rule                        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 632 | CKV2_GCP_3    | resource | google_logging_billing_account_exclusion                     | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 633 | CKV2_GCP_3    | resource | google_cloudfunctions_function                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 634 | CKV2_GCP_3    | resource | google_organization_iam_member                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 635 | CKV2_GCP_3    | resource | google_pubsub_topic                                          | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 636 | CKV2_GCP_3    | resource | google_compute_instance_from_template                        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 637 | CKV2_GCP_3    | resource | google_compute_reservation                                   | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 638 | CKV2_GCP_3    | resource | google_pubsub_subscription_iam                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 639 | CKV2_GCP_3    | resource | google_iap_brand                                             | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 640 | CKV2_GCP_3    | resource | google_storage_bucket_iam                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 641 | CKV2_GCP_3    | resource | google_cloudiot_device                                       | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 480 | CKV2_GCP_3    | resource | google_cloudfunctions_cloud_function_iam                     | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 481 | CKV2_GCP_3    | resource | google_storage_object_acl                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 482 | CKV2_GCP_3    | resource | google_secret_manager_secret                                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 483 | CKV2_GCP_3    | resource | google_compute_attached_disk                                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 484 | CKV2_GCP_3    | resource | google_kms_secret_ciphertext                                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 485 | CKV2_GCP_3    | resource | google_bigquery_table                                        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 486 | CKV2_GCP_3    | resource | google_service_networking_connection                         | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 487 | CKV2_GCP_3    | resource | google_compute_network_peering                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 488 | CKV2_GCP_3    | resource | google_compute_target_http_proxy                             | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 489 | CKV2_GCP_3    | resource | google_os_login_ssh_public_key                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 490 | CKV2_GCP_3    | resource | google_compute_region_disk                                   | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 491 | CKV2_GCP_3    | resource | google_container_analysis_note                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 492 | CKV2_GCP_3    | resource | google_resource_manager_lien                                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 493 | CKV2_GCP_3    | resource | google_kms_key_ring                                          | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 494 | CKV2_GCP_3    | resource | google_folder_iam_binding                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 495 | CKV2_GCP_3    | resource | google_kms_crypto_key_iam                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 496 | CKV2_GCP_3    | resource | google_healthcare_hl7_v2_store                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 497 | CKV2_GCP_3    | resource | google_compute_forwarding_rule                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 498 | CKV2_GCP_3    | resource | google_sourcerepo_repository_iam                             | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 499 | CKV2_GCP_3    | resource | google_compute_vpn_gateway                                   | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 500 | CKV2_GCP_3    | resource | google_deployment_manager_deployment                         | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 501 | CKV2_GCP_3    | resource | google_storage_default_object_acl                            | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 502 | CKV2_GCP_3    | resource | google_compute_router                                        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 503 | CKV2_GCP_3    | resource | google_compute_target_ssl_proxy                              | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 504 | CKV2_GCP_3    | resource | google_folder_iam_audit_config                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 505 | CKV2_GCP_3    | resource | google_spanner_instance_iam                                  | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 506 | CKV2_GCP_3    | resource | google_pubsub_topic                                          | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 507 | CKV2_GCP_3    | resource | google_dialogflow_agent                                      | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 508 | CKV2_GCP_3    | resource | google_compute_network_endpoint                              | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 509 | CKV2_GCP_3    | resource | google_compute_global_address                                | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 510 | CKV2_GCP_3    | resource | google_identity_platform_tenant                              | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 511 | CKV2_GCP_3    | resource | google_compute_address                                       | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 512 | CKV2_GCP_3    | resource | google_compute_shared_vpc_service_project                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 513 | CKV2_GCP_3    | resource | google_compute_disk_resource_policy_attachment               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 514 | CKV2_GCP_3    | resource | google_billing_account_iam_member                            | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 515 | CKV2_GCP_3    | resource | google_sql_database_instance                                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 516 | CKV2_GCP_3    | resource | google_identity_platform_oauth_idp_config                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 517 | CKV2_GCP_3    | resource | google_organization_iam_member                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 518 | CKV2_GCP_3    | resource | google_logging_organization_sink                             | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 519 | CKV2_GCP_3    | resource | google_healthcare_dicom_store                                | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 520 | CKV2_GCP_3    | resource | google_data_catalog_tag_template                             | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 521 | CKV2_GCP_3    | resource | google_compute_instance_group_named_port                     | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 522 | CKV2_GCP_3    | resource | google_binary_authorization_attestor                         | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 523 | CKV2_GCP_3    | resource | google_iap_brand                                             | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 524 | CKV2_GCP_3    | resource | google_organization_policy                                   | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 525 | CKV2_GCP_3    | resource | google_compute_global_network_endpoint_group                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 526 | CKV2_GCP_3    | resource | google_firestore_index                                       | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 527 | CKV2_GCP_3    | resource | google_identity_platform_tenant_oauth_idp_config             | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 528 | CKV2_GCP_3    | resource | google_vpc_access_connector                                  | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 529 | CKV2_GCP_3    | resource | google_iap_web_backend_service_iam                           | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 530 | CKV2_GCP_3    | resource | google_dataproc_cluster_iam                                  | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 531 | CKV2_GCP_3    | resource | google_compute_region_url_map                                | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 532 | CKV2_GCP_3    | resource | google_compute_disk                                          | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 533 | CKV2_GCP_3    | resource | google_cloudbuild_trigger                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 534 | CKV2_GCP_3    | resource | google_dataflow_flex_template_job                            | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 535 | CKV2_GCP_3    | resource | google_compute_project_metadata_item                         | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 536 | CKV2_GCP_3    | resource | google_compute_health_check                                  | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 537 | CKV2_GCP_3    | resource | google_compute_project_metadata                              | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 538 | CKV2_GCP_3    | resource | google_project_service                                       | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 539 | CKV2_GCP_3    | resource | google_ml_engine_model                                       | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 540 | CKV2_GCP_3    | resource | google_redis_instance                                        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 541 | CKV2_GCP_3    | resource | google_iap_web_type_app_engine_iam                           | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 542 | CKV2_GCP_3    | resource | google_compute_target_https_proxy                            | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 543 | CKV2_GCP_3    | resource | google_cloud_run_domain_mapping                              | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 544 | CKV2_GCP_3    | resource | google_folder_iam_policy                                     | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 545 | CKV2_GCP_3    | resource | google_sql_source_representation_instance                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 546 | CKV2_GCP_3    | resource | google_compute_firewall                                      | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 547 | CKV2_GCP_3    | resource | google_cloud_run_service_iam                                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 548 | CKV2_GCP_3    | resource | google_app_engine_domain_mapping                             | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 549 | CKV2_GCP_3    | resource | google_spanner_instance                                      | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 550 | CKV2_GCP_3    | resource | google_compute_reservation                                   | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 551 | CKV2_GCP_3    | resource | google_sql_ssl_cert                                          | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 552 | CKV2_GCP_3    | resource | google_bigquery_dataset                                      | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 553 | CKV2_GCP_3    | resource | google_compute_backend_bucket_signed_url_key                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 554 | CKV2_GCP_3    | resource | google_iap_web_iam                                           | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 555 | CKV2_GCP_3    | resource | google_compute_region_health_check                           | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 556 | CKV2_GCP_3    | resource | google_dns_policy                                            | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 557 | CKV2_GCP_3    | resource | google_spanner_database_iam                                  | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 558 | CKV2_GCP_3    | resource | google_logging_project_bucket_config                         | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 559 | CKV2_GCP_3    | resource | google_organization_iam_audit_config                         | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 560 | CKV2_GCP_3    | resource | google_service_account_iam                                   | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 561 | CKV2_GCP_3    | resource | google_healthcare_fhir_store_iam                             | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 562 | CKV2_GCP_3    | resource | google_healthcare_dataset_iam                                | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 563 | CKV2_GCP_3    | resource | google_healthcare_hl7_v2_store_iam                           | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 564 | CKV2_GCP_3    | resource | google_app_engine_flexible_app_version                       | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 565 | CKV2_GCP_3    | resource | google_compute_security_policy                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 566 | CKV2_GCP_3    | resource | google_spanner_database                                      | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 567 | CKV2_GCP_3    | resource | google_compute_target_tcp_proxy                              | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 568 | CKV2_GCP_3    | resource | google_organization_iam_policy                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 569 | CKV2_GCP_3    | resource | google_app_engine_standard_app_version                       | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 570 | CKV2_GCP_3    | resource | google_compute_router_nat                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 571 | CKV2_GCP_3    | resource | google_dataflow_job                                          | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 572 | CKV2_GCP_3    | resource | google_compute_ssl_policy                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 573 | CKV2_GCP_3    | resource | google_logging_folder_sink                                   | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 574 | CKV2_GCP_3    | resource | google_project_iam_member                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 575 | CKV2_GCP_3    | resource | google_compute_url_map                                       | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 576 | CKV2_GCP_3    | resource | google_cloud_scheduler_job                                   | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 577 | CKV2_GCP_3    | resource | google_binary_authorization_attestor_iam                     | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 578 | CKV2_GCP_3    | resource | google_compute_network_peering_routes_config                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 579 | CKV2_GCP_3    | resource | google_compute_region_ssl_certificate                        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 580 | CKV2_GCP_3    | resource | google_datastore_index                                       | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 581 | CKV2_GCP_3    | resource | google_healthcare_dicom_store_iam                            | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 582 | CKV2_GCP_3    | resource | google_folder_organization_policy                            | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 583 | CKV2_GCP_3    | resource | google_compute_http_health_check                             | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 584 | CKV2_GCP_3    | resource | google_access_context_manager_service_perimeter_resource     | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 585 | CKV2_GCP_3    | resource | google_usage_export_bucket                                   | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 586 | CKV2_GCP_3    | resource | google_pubsub_subscription                                   | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 587 | CKV2_GCP_3    | resource | google_app_engine_firewall_rule                              | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 588 | CKV2_GCP_3    | resource | google_storage_object_access_control                         | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 589 | CKV2_GCP_3    | resource | google_dns_managed_zone                                      | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 590 | CKV2_GCP_3    | resource | google_logging_folder_exclusion                              | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 591 | CKV2_GCP_3    | resource | google_bigtable_instance                                     | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 592 | CKV2_GCP_3    | resource | google_secret_manager_secret_version                         | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 593 | CKV2_GCP_3    | resource | google_compute_instance_group                                | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 594 | CKV2_GCP_3    | resource | google_compute_node_template                                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 595 | CKV2_GCP_3    | resource | google_compute_region_disk_resource_policy_attachment        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 596 | CKV2_GCP_3    | resource | google_healthcare_fhir_store                                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 597 | CKV2_GCP_3    | resource | google_project_iam                                           | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 598 | CKV2_GCP_3    | resource | google_compute_router_bgp_peer                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 599 | CKV2_GCP_3    | resource | google_network_management_connectivity_test_resource         | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 600 | CKV2_GCP_3    | resource | google_cloud_asset_project_feed                              | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 601 | CKV2_GCP_3    | resource | google_compute_instance_group_manager                        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 602 | CKV2_GCP_3    | resource | google_endpoints_service                                     | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 603 | CKV2_GCP_3    | resource | google_compute_resource_policy                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 604 | CKV2_GCP_3    | resource | google_compute_region_backend_service                        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 605 | CKV2_GCP_3    | resource | google_storage_notification                                  | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 606 | CKV2_GCP_3    | resource | google_compute_ssl_certificate                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 607 | CKV2_GCP_3    | resource | google_compute_shared_vpc_host_project                       | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 608 | CKV2_GCP_3    | resource | google_compute_region_target_https_proxy                     | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 609 | CKV2_GCP_3    | resource | google_compute_interconnect_attachment                       | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 610 | CKV2_GCP_3    | resource | google_bigquery_dataset_iam                                  | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 611 | CKV2_GCP_3    | resource | google_kms_key_ring_import_job                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 612 | CKV2_GCP_3    | resource | google_dialogflow_entity_type                                | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 613 | CKV2_GCP_3    | resource | google_cloud_tasks_queue                                     | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 614 | CKV2_GCP_3    | resource | google_compute_vpn_tunnel                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 615 | CKV2_GCP_3    | resource | google_iap_tunnel_instance_iam                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 616 | CKV2_GCP_3    | resource | google_compute_image                                         | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 617 | CKV2_GCP_3    | resource | google_data_catalog_tag                                      | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 618 | CKV2_GCP_3    | resource | google_iap_app_engine_service_iam                            | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 619 | CKV2_GCP_3    | resource | google_project_organization_policy                           | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 620 | CKV2_GCP_3    | resource | google_billing_account_iam_policy                            | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 621 | CKV2_GCP_3    | resource | google_project_iam_custom_role                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 622 | CKV2_GCP_3    | resource | google_iap_client                                            | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 623 | CKV2_GCP_3    | resource | google_monitoring_alert_policy                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 624 | CKV2_GCP_3    | resource | google_compute_project_default_network_tier                  | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 625 | CKV2_GCP_3    | resource | google_monitoring_slo                                        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 626 | CKV2_GCP_3    | resource | google_bigtable_instance_iam                                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 627 | CKV2_GCP_3    | resource | google_monitoring_uptime_check_config                        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 628 | CKV2_GCP_3    | resource | google_project                                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 629 | CKV2_GCP_3    | resource | google_billing_account_iam_binding                           | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 630 | CKV2_GCP_3    | resource | google_compute_region_target_http_proxy                      | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 631 | CKV2_GCP_3    | resource | google_cloud_asset_organization_feed                         | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 632 | CKV2_GCP_3    | resource | google_filestore_instance                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 633 | CKV2_GCP_3    | resource | google_data_catalog_entry_group                              | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 634 | CKV2_GCP_3    | resource | google_pubsub_subscription_iam                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 635 | CKV2_GCP_3    | resource | google_app_engine_application                                | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 636 | CKV2_GCP_3    | resource | google_storage_default_object_access_control                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 637 | CKV2_GCP_3    | resource | google_compute_backend_service_signed_url_key                | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 638 | CKV2_GCP_3    | resource | google_compute_network_endpoint_group                        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 639 | CKV2_GCP_3    | resource | google_logging_billing_account_sink                          | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 640 | CKV2_GCP_3    | resource | google_compute_region_autoscaler                             | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 641 | CKV2_GCP_3    | resource | google_monitoring_group                                      | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
 | 642 | CKV2_GCP_3    | resource | google_app_engine_service_split_traffic                      | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 643 | CKV2_GCP_3    | resource | google_compute_target_tcp_proxy                              | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 644 | CKV2_GCP_3    | resource | google_active_directory_domain                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 645 | CKV2_GCP_3    | resource | google_organization_iam_custom_role                          | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 646 | CKV2_GCP_3    | resource | google_cloud_asset_folder_feed                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 647 | CKV2_GCP_3    | resource | google_cloud_run_domain_mapping                              | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 648 | CKV2_GCP_3    | resource | google_spanner_database                                      | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 649 | CKV2_GCP_3    | resource | google_compute_backend_service_signed_url_key                | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 650 | CKV2_GCP_3    | resource | google_container_registry                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 651 | CKV2_GCP_3    | resource | google_dns_managed_zone                                      | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 652 | CKV2_GCP_3    | resource | google_compute_network_peering_routes_config                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 653 | CKV2_GCP_3    | resource | google_compute_url_map                                       | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 654 | CKV2_GCP_3    | resource | google_identity_platform_tenant_default_supported_idp_config | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 655 | CKV2_GCP_3    | resource | google_pubsub_topic_iam                                      | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 656 | CKV2_GCP_3    | resource | google_compute_region_health_check                           | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 657 | CKV2_GCP_3    | resource | google_project_service                                       | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 658 | CKV2_GCP_3    | resource | google_identity_platform_inbound_saml_config                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 659 | CKV2_GCP_3    | resource | google_iap_client                                            | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 660 | CKV2_GCP_3    | resource | google_container_node_pool                                   | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 661 | CKV2_GCP_3    | resource | google_scc_source                                            | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 662 | CKV2_GCP_3    | resource | google_compute_instance_iam                                  | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 663 | CKV2_GCP_3    | resource | google_organization_iam_binding                              | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 664 | CKV2_GCP_3    | resource | google_storage_default_object_acl                            | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 665 | CKV2_GCP_3    | resource | google_app_engine_flexible_app_version                       | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 666 | CKV2_GCP_3    | resource | google_monitoring_metric_descriptor                          | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 667 | CKV2_GCP_3    | resource | google_storage_default_object_access_control                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 668 | CKV2_GCP_3    | resource | google_storage_notification                                  | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 669 | CKV2_GCP_3    | resource | google_healthcare_hl7_v2_store_iam                           | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 670 | CKV2_GCP_3    | resource | google_access_context_manager_service_perimeter              | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 671 | CKV2_GCP_3    | resource | google_kms_key_ring_import_job                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 672 | CKV2_GCP_3    | resource | google_dataproc_autoscaling_policy                           | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 673 | CKV2_GCP_3    | resource | google_healthcare_dicom_store                                | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 674 | CKV2_GCP_3    | resource | google_endpoints_service                                     | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 675 | CKV2_GCP_3    | resource | google_compute_snapshot                                      | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 676 | CKV2_GCP_3    | resource | google_container_analysis_occurrence                         | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 677 | CKV2_GCP_3    | resource | google_sourcerepo_repository                                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 678 | CKV2_GCP_3    | resource | google_deployment_manager_deployment                         | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 679 | CKV2_GCP_3    | resource | google_monitoring_alert_policy                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 680 | CKV2_GCP_3    | resource | google_compute_shared_vpc_service_project                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 681 | CKV2_GCP_3    | resource | google_compute_backend_bucket                                | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 682 | CKV2_GCP_3    | resource | google_cloud_tasks_queue                                     | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 683 | CKV2_GCP_3    | resource | google_project_iam                                           | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 684 | CKV2_GCP_3    | resource | google_project_iam_member                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 685 | CKV2_GCP_3    | resource | google_dataproc_job                                          | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 686 | CKV2_GCP_3    | resource | google_compute_global_network_endpoint                       | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 687 | CKV2_GCP_3    | resource | google_compute_https_health_check                            | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 688 | CKV2_GCP_3    | resource | google_bigtable_instance_iam                                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 689 | CKV2_GCP_3    | resource | google_storage_hmac_key                                      | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 690 | CKV2_GCP_3    | resource | google_compute_router_bgp_peer                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 691 | CKV2_GCP_3    | resource | google_compute_shared_vpc_host_project                       | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 692 | CKV2_GCP_3    | resource | google_iap_app_engine_service_iam                            | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 693 | CKV2_GCP_3    | resource | google_compute_address                                       | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 694 | CKV2_GCP_3    | resource | google_compute_resource_policy                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 695 | CKV2_GCP_3    | resource | google_compute_router                                        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 696 | CKV2_GCP_3    | resource | google_iap_web_iam                                           | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 697 | CKV2_GCP_3    | resource | google_binary_authorization_attestor_iam                     | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 698 | CKV2_GCP_3    | resource | google_compute_instance_template                             | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 699 | CKV2_GCP_3    | resource | google_access_context_manager_access_level                   | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 700 | CKV2_GCP_3    | resource | google_pubsub_subscription                                   | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 701 | CKV2_GCP_3    | resource | google_compute_router_interface                              | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 702 | CKV2_GCP_3    | resource | google_compute_ssl_policy                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 703 | CKV2_GCP_3    | resource | google_kms_key_ring                                          | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 704 | CKV2_GCP_3    | resource | google_sql_source_representation_instance                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 705 | CKV2_GCP_3    | resource | google_usage_export_bucket                                   | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 706 | CKV2_GCP_3    | resource | google_dataflow_flex_template_job                            | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 707 | CKV2_GCP_3    | resource | google_folder_iam_policy                                     | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 708 | CKV2_GCP_3    | resource | google_compute_health_check                                  | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 709 | CKV2_GCP_3    | resource | google_cloudbuild_trigger                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 710 | CKV2_GCP_3    | resource | google_compute_target_instance                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 711 | CKV2_GCP_3    | resource | google_logging_project_bucket_config                         | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 712 | CKV2_GCP_3    | resource | google_storage_bucket_iam_binding                            | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 713 | CKV2_GCP_3    | resource | google_cloud_run_service                                     | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 714 | CKV2_GCP_3    | resource | google_bigtable_instance                                     | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 715 | CKV2_GCP_3    | resource | google_bigquery_dataset_iam                                  | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 716 | CKV2_GCP_3    | resource | google_compute_global_network_endpoint_group                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 717 | CKV2_GCP_3    | resource | google_cloudfunctions_cloud_function_iam                     | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 718 | CKV2_GCP_3    | resource | google_kms_secret_ciphertext                                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 719 | CKV2_GCP_3    | resource | google_datastore_index                                       | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 720 | CKV2_GCP_3    | resource | google_iap_web_type_compute_iam                              | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 721 | CKV2_GCP_3    | resource | google_runtimeconfig_config_iam                              | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 722 | CKV2_GCP_3    | resource | google_kms_key_ring_iam                                      | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 723 | CKV2_GCP_3    | resource | google_healthcare_fhir_store_iam                             | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 724 | CKV2_GCP_3    | resource | google_redis_instance                                        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 725 | CKV2_GCP_3    | resource | google_dialogflow_intent                                     | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 726 | CKV2_GCP_3    | resource | google_bigtable_gc_policy                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 727 | CKV2_GCP_3    | resource | google_cloudiot_device_registry                              | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 728 | CKV2_GCP_3    | resource | google_organization_iam_audit_config                         | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 729 | CKV2_GCP_3    | resource | google_compute_router_nat                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 730 | CKV2_GCP_3    | resource | google_resource_manager_lien                                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 731 | CKV2_GCP_3    | resource | google_logging_folder_bucket_config                          | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 732 | CKV2_GCP_3    | resource | google_bigtable_table                                        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 733 | CKV2_GCP_3    | resource | google_identity_platform_tenant                              | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 734 | CKV2_GCP_3    | resource | google_storage_bucket_acl                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 735 | CKV2_GCP_3    | resource | google_storage_bucket_iam_member                             | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 736 | CKV2_GCP_3    | resource | google_project_organization_policy                           | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 737 | CKV2_GCP_3    | resource | google_logging_project_sink                                  | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 738 | CKV2_GCP_3    | resource | google_compute_subnetwork_iam                                | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 739 | CKV2_GCP_3    | resource | google_composer_environment                                  | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 740 | CKV2_GCP_3    | resource | google_compute_network_peering                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 741 | CKV2_GCP_3    | resource | google_folder_iam_member                                     | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 643 | CKV2_GCP_3    | resource | google_bigtable_table                                        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 644 | CKV2_GCP_3    | resource | google_compute_region_instance_group_manager                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 645 | CKV2_GCP_3    | resource | google_storage_bucket_acl                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 646 | CKV2_GCP_3    | resource | google_compute_instance                                      | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 647 | CKV2_GCP_3    | resource | google_binary_authorization_policy                           | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 648 | CKV2_GCP_3    | resource | google_logging_organization_exclusion                        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 649 | CKV2_GCP_3    | resource | google_compute_autoscaler                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 650 | CKV2_GCP_3    | resource | google_logging_organization_bucket_config                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 651 | CKV2_GCP_3    | resource | google_compute_target_instance                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 652 | CKV2_GCP_3    | resource | google_healthcare_dataset                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 653 | CKV2_GCP_3    | resource | google_storage_transfer_job                                  | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 654 | CKV2_GCP_3    | resource | google_folder                                                | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 655 | CKV2_GCP_3    | resource | google_bigquery_data_transfer_config                         | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 656 | CKV2_GCP_3    | resource | google_storage_bucket_iam                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 657 | CKV2_GCP_3    | resource | google_identity_platform_tenant_default_supported_idp_config | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 658 | CKV2_GCP_3    | resource | google_monitoring_dashboard                                  | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 659 | CKV2_GCP_3    | resource | google_service_account_key                                   | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 660 | CKV2_GCP_3    | resource | google_monitoring_notification_channel                       | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 661 | CKV2_GCP_3    | resource | google_os_config_patch_deployment                            | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 662 | CKV2_GCP_3    | resource | google_logging_folder_bucket_config                          | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 663 | CKV2_GCP_3    | resource | google_access_context_manager_service_perimeter              | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 664 | CKV2_GCP_3    | resource | google_bigquery_job                                          | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 665 | CKV2_GCP_3    | resource | google_compute_route                                         | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 666 | CKV2_GCP_3    | resource | google_iap_web_type_compute_iam                              | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 667 | CKV2_GCP_3    | resource | google_cloud_run_service                                     | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 668 | CKV2_GCP_3    | resource | google_compute_instance_template                             | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 669 | CKV2_GCP_3    | resource | google_container_cluster                                     | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 670 | CKV2_GCP_3    | resource | google_bigtable_gc_policy                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 671 | CKV2_GCP_3    | resource | google_dialogflow_intent                                     | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 672 | CKV2_GCP_3    | resource | google_tpu_node                                              | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 673 | CKV2_GCP_3    | resource | google_compute_subnetwork                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 674 | CKV2_GCP_3    | resource | google_identity_platform_default_supported_idp_config        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 675 | CKV2_GCP_3    | resource | google_logging_metric                                        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 676 | CKV2_GCP_3    | resource | google_compute_target_pool                                   | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 677 | CKV2_GCP_3    | resource | google_storage_bucket                                        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 678 | CKV2_GCP_3    | resource | google_bigtable_app_profile                                  | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 679 | CKV2_GCP_3    | resource | google_organization_iam_binding                              | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 680 | CKV2_GCP_3    | resource | google_storage_bucket_iam_member                             | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 681 | CKV2_GCP_3    | resource | google_scc_source                                            | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 682 | CKV2_GCP_3    | resource | google_runtimeconfig_variable                                | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 683 | CKV2_GCP_3    | resource | google_compute_global_network_endpoint                       | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 684 | CKV2_GCP_3    | resource | google_identity_platform_tenant_inbound_saml_config          | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 685 | CKV2_GCP_3    | resource | google_compute_backend_bucket                                | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 686 | CKV2_GCP_3    | resource | google_storage_hmac_key                                      | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 687 | CKV2_GCP_3    | resource | google_dataproc_cluster                                      | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 688 | CKV2_GCP_3    | resource | google_compute_instance_from_template                        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 689 | CKV2_GCP_3    | resource | google_sourcerepo_repository                                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 690 | CKV2_GCP_3    | resource | google_active_directory_domain                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 691 | CKV2_GCP_3    | resource | google_kms_crypto_key                                        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 692 | CKV2_GCP_3    | resource | google_compute_router_interface                              | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 693 | CKV2_GCP_3    | resource | google_secret_manager_secret_iam                             | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 694 | CKV2_GCP_3    | resource | google_logging_billing_account_bucket_config                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 695 | CKV2_GCP_3    | resource | google_runtimeconfig_config                                  | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 696 | CKV2_GCP_3    | resource | google_identity_platform_inbound_saml_config                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 697 | CKV2_GCP_3    | resource | google_project_iam_binding                                   | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 698 | CKV2_GCP_3    | resource | google_iap_app_engine_version_iam                            | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 699 | CKV2_GCP_3    | resource | google_dns_record_set                                        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 700 | CKV2_GCP_3    | resource | google_access_context_manager_access_level                   | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 701 | CKV2_GCP_3    | resource | google_storage_bucket_iam_binding                            | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 702 | CKV2_GCP_3    | resource | google_compute_https_health_check                            | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 703 | CKV2_GCP_3    | resource | google_storage_bucket_access_control                         | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 704 | CKV2_GCP_3    | resource | google_compute_instance_iam                                  | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 705 | CKV2_GCP_3    | resource | google_composer_environment                                  | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 706 | CKV2_GCP_3    | resource | google_sql_user                                              | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 707 | CKV2_GCP_3    | resource | google_organization_iam_custom_role                          | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 708 | CKV2_GCP_3    | resource | google_compute_backend_service                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 709 | CKV2_GCP_3    | resource | google_data_catalog_entry                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 710 | CKV2_GCP_3    | resource | google_container_node_pool                                   | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 711 | CKV2_GCP_3    | resource | google_cloudfunctions_function                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 712 | CKV2_GCP_3    | resource | google_logging_project_sink                                  | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 713 | CKV2_GCP_3    | resource | google_data_catalog_entry_group_iam                          | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 714 | CKV2_GCP_3    | resource | google_cloudiot_device_registry                              | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 715 | CKV2_GCP_3    | resource | google_logging_billing_account_exclusion                     | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 716 | CKV2_GCP_3    | resource | google_service_account                                       | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 717 | CKV2_GCP_3    | resource | google_compute_subnetwork_iam                                | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 718 | CKV2_GCP_3    | resource | google_container_analysis_occurrence                         | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 719 | CKV2_GCP_3    | resource | google_logging_project_exclusion                             | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 720 | CKV2_GCP_3    | resource | google_folder_iam_member                                     | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 721 | CKV2_GCP_3    | resource | google_compute_global_forwarding_rule                        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 722 | CKV2_GCP_3    | resource | google_cloud_asset_folder_feed                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 723 | CKV2_GCP_3    | resource | google_dataproc_job_iam                                      | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 724 | CKV2_GCP_3    | resource | google_dataproc_job                                          | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 725 | CKV2_GCP_3    | resource | google_app_engine_application_url_dispatch_rules             | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 726 | CKV2_GCP_3    | resource | google_endpoints_service_iam                                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 727 | CKV2_GCP_3    | resource | google_compute_node_group                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 728 | CKV2_GCP_3    | resource | google_access_context_manager_access_policy                  | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 729 | CKV2_GCP_3    | resource | google_cloudiot_device                                       | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 730 | CKV2_GCP_3    | resource | google_runtimeconfig_config_iam                              | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 731 | CKV2_GCP_3    | resource | google_bigquery_dataset_access                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 732 | CKV2_GCP_3    | resource | google_monitoring_metric_descriptor                          | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 733 | CKV2_GCP_3    | resource | google_monitoring_service                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 734 | CKV2_GCP_3    | resource | google_sql_database                                          | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 735 | CKV2_GCP_3    | resource | google_kms_key_ring_iam                                      | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 736 | CKV2_GCP_3    | resource | google_storage_bucket_object                                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 737 | CKV2_GCP_3    | resource | google_compute_snapshot                                      | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 738 | CKV2_GCP_3    | resource | google_compute_network                                       | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 739 | CKV2_GCP_3    | resource | google_dataproc_autoscaling_policy                           | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 740 | CKV2_GCP_3    | resource | google_pubsub_topic_iam                                      | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 741 | CKV2_GCP_3    | resource | google_container_registry                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
 | 742 | CKV2_GCP_4    | resource | google_logging_project_sink                                  | Ensure that retention policies on log buckets are configured using Bucket Lock                                                                                                                           | Terraform |
-| 743 | CKV2_GCP_4    | resource | google_logging_organization_sink                             | Ensure that retention policies on log buckets are configured using Bucket Lock                                                                                                                           | Terraform |
-| 744 | CKV2_GCP_4    | resource | google_storage_bucket                                        | Ensure that retention policies on log buckets are configured using Bucket Lock                                                                                                                           | Terraform |
-| 745 | CKV2_GCP_4    | resource | google_logging_folder_sink                                   | Ensure that retention policies on log buckets are configured using Bucket Lock                                                                                                                           | Terraform |
+| 743 | CKV2_GCP_4    | resource | google_logging_folder_sink                                   | Ensure that retention policies on log buckets are configured using Bucket Lock                                                                                                                           | Terraform |
+| 744 | CKV2_GCP_4    | resource | google_logging_organization_sink                             | Ensure that retention policies on log buckets are configured using Bucket Lock                                                                                                                           | Terraform |
+| 745 | CKV2_GCP_4    | resource | google_storage_bucket                                        | Ensure that retention policies on log buckets are configured using Bucket Lock                                                                                                                           | Terraform |
 | 746 | CKV2_GCP_5    | resource | google_project                                               | Ensure that Cloud Audit Logging is configured properly across all services and all users from a project                                                                                                  | Terraform |
 | 747 | CKV2_GCP_5    | resource | google_project_iam_audit_config                              | Ensure that Cloud Audit Logging is configured properly across all services and all users from a project                                                                                                  | Terraform |
-| 748 | CKV2_GCP_6    | resource | google_kms_crypto_key_iam_member                             | Ensure that Cloud KMS cryptokeys are not anonymously or publicly accessible                                                                                                                              | Terraform |
-| 749 | CKV2_GCP_6    | resource | google_kms_crypto_key_iam_binding                            | Ensure that Cloud KMS cryptokeys are not anonymously or publicly accessible                                                                                                                              | Terraform |
+| 748 | CKV2_GCP_6    | resource | google_kms_crypto_key_iam_binding                            | Ensure that Cloud KMS cryptokeys are not anonymously or publicly accessible                                                                                                                              | Terraform |
+| 749 | CKV2_GCP_6    | resource | google_kms_crypto_key_iam_member                             | Ensure that Cloud KMS cryptokeys are not anonymously or publicly accessible                                                                                                                              | Terraform |
 | 750 | CKV2_GCP_6    | resource | google_kms_crypto_key                                        | Ensure that Cloud KMS cryptokeys are not anonymously or publicly accessible                                                                                                                              | Terraform |
-| 751 | CKV2_GCP_7    | resource | google_sql_user                                              | Ensure that a MySQL database instance does not allow anyone to connect with administrative privileges                                                                                                    | Terraform |
-| 752 | CKV2_GCP_7    | resource | google_sql_database_instance                                 | Ensure that a MySQL database instance does not allow anyone to connect with administrative privileges                                                                                                    | Terraform |
+| 751 | CKV2_GCP_7    | resource | google_sql_database_instance                                 | Ensure that a MySQL database instance does not allow anyone to connect with administrative privileges                                                                                                    | Terraform |
+| 752 | CKV2_GCP_7    | resource | google_sql_user                                              | Ensure that a MySQL database instance does not allow anyone to connect with administrative privileges                                                                                                    | Terraform |
 | 753 | CKV_GIT_1     | resource | github_repository                                            | Ensure Repository is Private                                                                                                                                                                             | Terraform |
 | 754 | CKV_LIN_1     | provider | linode                                                       | Ensure no hard coded Linode tokens exist in provider                                                                                                                                                     | Terraform |
 | 755 | CKV_LIN_2     | resource | linode_instance                                              | Ensure SSH key set in authorized_keys                                                                                                                                                                    | Terraform |
diff --git a/kubernetes/requirements.txt b/kubernetes/requirements.txt
index 6df899359..4b4c1e214 100644
--- a/kubernetes/requirements.txt
+++ b/kubernetes/requirements.txt
@@ -1,1 +1,1 @@
-checkov==2.0.109
+checkov==2.0.111
diff --git a/setup.py b/setup.py
index 59655e822..03ff2aae3 100644
--- a/setup.py
+++ b/setup.py
@@ -62,6 +62,8 @@ setup(
     author_email="meet@bridgecrew.io",
     url="https://github.com/nimrodkor/checkov",
     packages=setuptools.find_packages(exclude=["tests*","integration_tests*"]),
+    include_package_data=True,
+    package_data = {'': ['*.yaml', '*.yml']},
     scripts=["bin/checkov", "bin/checkov.cmd"],
     long_description=long_description,
     long_description_content_type="text/markdown",


Test patch:
diff --git a/.github/workflows/pr-test.yml b/.github/workflows/pr-test.yml
index 835df5119..ac161d952 100644
--- a/.github/workflows/pr-test.yml
+++ b/.github/workflows/pr-test.yml
@@ -58,10 +58,10 @@ jobs:
       - name: Build & install checkov package
         run: |
           pipenv --python ${{ matrix.python }}
+          pipenv run pip install --upgrade pip==21.1.1
           pipenv run pip install pytest
           pipenv run python setup.py sdist bdist_wheel
-          pipenv run pip install --upgrade pip==20.2
-          pipenv run pip install dist/checkov-*
+          pipenv run pip install dist/checkov-*.whl
       - name: Clone Terragoat - vulnerable terraform
         uses: actions/checkout@master
         with:
@@ -84,6 +84,8 @@ jobs:
           clean: false
           path: 'kubernetes-goat'
       - name: Create checkov reports
+        env:
+          LOG_LEVEL: INFO
         run: |
           pipenv run checkov -s --framework terraform -d terragoat/terraform/ -o json > checkov_report_terragoat.json
           pipenv run checkov -s -d cfngoat/ -o json > checkov_report_cfngoat.json
diff --git a/integration_tests/test_checkov_json_report.py b/integration_tests/test_checkov_json_report.py
index 787fecade..7e5d3d1c5 100644
--- a/integration_tests/test_checkov_json_report.py
+++ b/integration_tests/test_checkov_json_report.py
@@ -23,13 +23,17 @@ class TestCheckovJsonReport(unittest.TestCase):
         report_path = current_dir + "/../checkov_report_kubernetes-goat-helm.json"
         self.validate_report(report_path)
 
-    def test_checkov_report_terragoat_with_skip(self):
-        report_path = current_dir + "/../checkov_report_terragoat_with_skip.json"
-        with open(report_path) as json_file:
-            data = json.load(json_file)
-            for check_result in data["results"]["passed_checks"]:
-                self.assertNotEquals(check_result["check_id"], "CKV_AWS_33")
-                self.assertNotEquals(check_result["check_id"], "CKV_AWS_41")
+    # def test_checkov_report_terragoat_with_skip(self):
+    #     report_path = current_dir + "/../checkov_report_terragoat_with_skip.json"
+    #     checkov2_graph_findings = 0
+    #     with open(report_path) as json_file:
+    #         data = json.load(json_file)
+    #         for check_result in data["results"]["passed_checks"]:
+    #             self.assertNotEqual(check_result["check_id"], "CKV_AWS_33")
+    #             self.assertNotEqual(check_result["check_id"], "CKV_AWS_41")
+    #             if check_result["check_id"].startswith('CKV2'):
+    #                 checkov2_graph_findings += 1
+    #     self.assertGreater(checkov2_graph_findings, 20)
 
     def validate_report(self, report_path):
         with open(report_path) as json_file:
diff --git a/tests/terraform/checks/resource/azure/test_KeyVaultEnablesFirewallRulesSettings.py b/tests/terraform/checks/resource/azure/test_KeyVaultEnablesFirewallRulesSettings.py
index 163d3ab64..6b786ba7e 100644
--- a/tests/terraform/checks/resource/azure/test_KeyVaultEnablesFirewallRulesSettings.py
+++ b/tests/terraform/checks/resource/azure/test_KeyVaultEnablesFirewallRulesSettings.py
@@ -73,7 +73,7 @@ class TestKeyVaultEnablesFirewallRulesSettings(unittest.TestCase):
                     ]
                   }
                   network_acls {
-                    default_action = "deny" 
+                    default_action = "Deny" 
                   }
                 }
                 """)
@@ -111,7 +111,7 @@ class TestKeyVaultEnablesFirewallRulesSettings(unittest.TestCase):
                     ]
                   }
                   network_acls {
-                    default_action = "allow" 
+                    default_action = "Allow" 
                   }
                 }
                 """)