Repository: bridgecrewio/checkov

Issue:
Bug: file preview not working with SARIF results uploaded from Checkov to Github
Being able to view the code responsible for a security alert in Github's code scanning feature is crucial for developers. The file preview provides important contextual information for devs that helps them arrive at a fix without a lot of context switching.

Other tools, like CodeQL and tfsec, currently display file previews in code scanning without issue. The individual result view for Checkov, however, currently looks like this. 

![image](https://user-images.githubusercontent.com/21954788/132904065-3bce96cd-69a6-4db7-8f5a-012a74d18fb1.png)

Note the odd double slash in front of the filename. My hunch is that the double slash is preventing code scanning's rendering engine from displaying a file preview because, in this example, //backend.tf is not a valid filepath, as it needs to be per https://docs.github.com/en/code-security/code-scanning/integrating-with-code-scanning/sarif-support-for-code-scanning#physicallocation-object.

The bug seems to be affecting the individual result view specifically, since the list view does have a valid filepath, as can be seen here:

![image](https://user-images.githubusercontent.com/21954788/132904002-a8418ec0-36fd-4267-b8d8-f7b59dec0f95.png)

I don't know Checkov's codebase well enough to suggest a fix -- and it looks like Bridgecrew is committed to absolute URIs, which may make a fix trickier -- but `record.file_path` is somehow ending up with an additional prepended slash it shouldn't have:

https://github.com/bridgecrewio/checkov/blob/a217a1a04d92ed0ca6456ed5e3e13f4403f0eef1/checkov/common/output/report.py#L230

Discussion:

Patch:
diff --git a/checkov/common/bridgecrew/image_scanning/docker_image_scanning_integration.py b/checkov/common/bridgecrew/image_scanning/docker_image_scanning_integration.py
index 47625b06e..111f7a6f4 100644
--- a/checkov/common/bridgecrew/image_scanning/docker_image_scanning_integration.py
+++ b/checkov/common/bridgecrew/image_scanning/docker_image_scanning_integration.py
@@ -23,7 +23,7 @@ class DockerImageScanningIntegration:
         os_type = platform.system().lower()
         headers = merge_dicts(
             get_default_get_headers(bc_integration.bc_source, bc_integration.bc_source_version),
-            {'Authorization': self.get_bc_api_key}
+            {'Authorization': self.get_bc_api_key()}
         )
         response = requests.request('GET', f"{self.docker_image_scanning_base_url}/twistcli/download?os={os_type}", headers=headers)
         open(cli_file_name, 'wb').write(response.content)
@@ -34,7 +34,7 @@ class DockerImageScanningIntegration:
     def report_results(self, docker_image_name, dockerfile_path, dockerfile_content, twistcli_scan_result):
         headers = merge_dicts(
             get_default_post_headers(bc_integration.bc_source, bc_integration.bc_source_version),
-            {'Authorization': self.get_bc_api_key}
+            {'Authorization': self.get_bc_api_key()}
         )
         vulnerabilities = list(map(lambda x: {
             'cveId': x['id'],
diff --git a/checkov/common/output/report.py b/checkov/common/output/report.py
index 007f0ab80..c097a3c0d 100644
--- a/checkov/common/output/report.py
+++ b/checkov/common/output/report.py
@@ -227,7 +227,7 @@ class Report:
                 "locations": [
                     {
                         "physicalLocation": {
-                            "artifactLocation": {"uri": record.file_path},
+                            "artifactLocation": {"uri": record.file_path.lstrip("/")},
                             "region": {
                                 "startLine": int(record.file_line_range[0]),
                                 "endLine": int(record.file_line_range[1]),
diff --git a/checkov/secrets/runner.py b/checkov/secrets/runner.py
index 9bea94229..4e087ce1c 100644
--- a/checkov/secrets/runner.py
+++ b/checkov/secrets/runner.py
@@ -144,7 +144,7 @@ class Runner(BaseRunner):
                 bc_check_id = bc_integration.ckv_to_bc_id_mapping.get(check_id) if bc_integration.ckv_to_bc_id_mapping else None
                 if not check_id:
                     continue
-                if runner_filter.checks and check_id not in runner_filter.checks:
+                if runner_filter.checks and (check_id not in runner_filter.checks and bc_check_id not in runner_filter.checks):
                     continue
                 result: _CheckResult = {'result': CheckResult.FAILED}
                 line_text = linecache.getline(secret.filename, secret.line_number)
@@ -152,6 +152,7 @@ class Runner(BaseRunner):
                     continue
                 result = self.search_for_suppression(
                     check_id=check_id,
+                    bc_check_id=bc_check_id,
                     secret=secret,
                     skipped_checks=runner_filter.skip_checks,
                 ) or result
@@ -174,10 +175,11 @@ class Runner(BaseRunner):
     @staticmethod
     def search_for_suppression(
         check_id: str,
+        bc_check_id: str,
         secret: PotentialSecret,
         skipped_checks: List[str]
     ) -> Optional[_CheckResult]:
-        if check_id in skipped_checks and check_id in CHECK_ID_TO_SECRET_TYPE.keys():
+        if (check_id in skipped_checks or bc_check_id in skipped_checks) and check_id in CHECK_ID_TO_SECRET_TYPE.keys():
             return {
                 "result": CheckResult.SKIPPED,
                 "suppress_comment": f"Secret scan {check_id} is skipped"
@@ -186,7 +188,7 @@ class Runner(BaseRunner):
         for line_number in [secret.line_number, secret.line_number - 1, secret.line_number + 1]:
             lt = linecache.getline(secret.filename, line_number)
             skip_search = re.search(COMMENT_REGEX, lt)
-            if skip_search and skip_search.group(2) == check_id:
+            if skip_search and (skip_search.group(2) == check_id or skip_search.group(2) == bc_check_id):
                 return {
                     "result": CheckResult.SKIPPED,
                     "suppress_comment": skip_search.group(3)[1:] if skip_search.group(3) else "No comment provided"
diff --git a/checkov/serverless/parsers/context_parser.py b/checkov/serverless/parsers/context_parser.py
index 666feeb7b..b5f936db2 100644
--- a/checkov/serverless/parsers/context_parser.py
+++ b/checkov/serverless/parsers/context_parser.py
@@ -56,7 +56,11 @@ class ContextParser(object):
             template_function = self.functions_conf.get(sls_function_name)
             if not template_function:
                 continue
-            if template_function.get(dst_enriched_attribute):
+            function_attribute = template_function.get(dst_enriched_attribute)
+            if function_attribute:
+                if not isinstance(function_attribute, type(provider_attribute)):
+                    # Do not enrich maps with strings etc
+                    continue
                 if isinstance(template_function[dst_enriched_attribute], list_node):
                     template_function[dst_enriched_attribute].extend(provider_attribute)
                 if isinstance(template_function[dst_enriched_attribute], dict_node):
diff --git a/checkov/version.py b/checkov/version.py
index 84de13931..adfae1d81 100644
--- a/checkov/version.py
+++ b/checkov/version.py
@@ -1,1 +1,1 @@
-version = '2.0.413'
+version = '2.0.415'
diff --git a/docs/5.Policy Index/all.md b/docs/5.Policy Index/all.md
index 786068bde..dd56ac98e 100644
--- a/docs/5.Policy Index/all.md
+++ b/docs/5.Policy Index/all.md
@@ -354,8 +354,8 @@ nav_order: 1
 |  343 | CKV2_AWS_14   | resource                         | aws_iam_group                                                                | Ensure that IAM groups includes at least one IAM user                                                                                                                                                    | Terraform                        |
 |  344 | CKV2_AWS_15   | resource                         | aws_elb                                                                      | Ensure that auto Scaling groups that are associated with a load balancer, are using Elastic Load Balancing health checks.                                                                                | Terraform                        |
 |  345 | CKV2_AWS_15   | resource                         | aws_autoscaling_group                                                        | Ensure that auto Scaling groups that are associated with a load balancer, are using Elastic Load Balancing health checks.                                                                                | Terraform                        |
-|  346 | CKV2_AWS_16   | resource                         | aws_dynamodb_table                                                           | Ensure that Auto Scaling is enabled on your DynamoDB tables                                                                                                                                              | Terraform                        |
-|  347 | CKV2_AWS_16   | resource                         | aws_appautoscaling_target                                                    | Ensure that Auto Scaling is enabled on your DynamoDB tables                                                                                                                                              | Terraform                        |
+|  346 | CKV2_AWS_16   | resource                         | aws_appautoscaling_target                                                    | Ensure that Auto Scaling is enabled on your DynamoDB tables                                                                                                                                              | Terraform                        |
+|  347 | CKV2_AWS_16   | resource                         | aws_dynamodb_table                                                           | Ensure that Auto Scaling is enabled on your DynamoDB tables                                                                                                                                              | Terraform                        |
 |  348 | CKV2_AWS_18   | resource                         | aws_backup_selection                                                         | Ensure that Elastic File System (Amazon EFS) file systems are added in the backup plans of AWS Backup                                                                                                    | Terraform                        |
 |  349 | CKV2_AWS_19   | resource                         | aws_eip_association                                                          | Ensure that all EIP addresses allocated to a VPC are attached to EC2 instances                                                                                                                           | Terraform                        |
 |  350 | CKV2_AWS_19   | resource                         | aws_eip                                                                      | Ensure that all EIP addresses allocated to a VPC are attached to EC2 instances                                                                                                                           | Terraform                        |
@@ -364,8 +364,8 @@ nav_order: 1
 |  353 | CKV2_AWS_21   | resource                         | aws_iam_group_membership                                                     | Ensure that all IAM users are members of at least one IAM group.                                                                                                                                         | Terraform                        |
 |  354 | CKV2_AWS_22   | resource                         | aws_iam_user                                                                 | Ensure an IAM User does not have access to the console                                                                                                                                                   | Terraform                        |
 |  355 | CKV2_AWS_23   | resource                         | aws_route53_record                                                           | Route53 A Record has Attached Resource                                                                                                                                                                   | Terraform                        |
-|  356 | CKV2_AWS_27   | resource                         | aws_db_instance                                                              | Postgres RDS has Query Logging enabled                                                                                                                                                                   | Terraform                        |
-|  357 | CKV2_AWS_27   | resource                         | aws_rds_cluster_parameter_group                                              | Postgres RDS has Query Logging enabled                                                                                                                                                                   | Terraform                        |
+|  356 | CKV2_AWS_27   | resource                         | aws_rds_cluster_parameter_group                                              | Postgres RDS has Query Logging enabled                                                                                                                                                                   | Terraform                        |
+|  357 | CKV2_AWS_27   | resource                         | aws_db_instance                                                              | Postgres RDS has Query Logging enabled                                                                                                                                                                   | Terraform                        |
 |  358 | CKV2_AWS_28   | resource                         | aws_lb                                                                       | Ensure public facing ALB are protected by WAF                                                                                                                                                            | Terraform                        |
 |  359 | CKV2_AWS_29   | resource                         | aws_api_gateway_rest_api                                                     | Ensure public API gateway are protected by WAF                                                                                                                                                           | Terraform                        |
 |  360 | CKV2_AWS_29   | resource                         | aws_api_gateway_stage                                                        | Ensure public API gateway are protected by WAF                                                                                                                                                           | Terraform                        |
@@ -572,48 +572,48 @@ nav_order: 1
 |  561 | CKV_AZURE_132 | resource                         | azurerm_cosmosdb_account                                                     | Ensure cosmosdb does not allow privileged escalation by restricting management plane changes                                                                                                             | Terraform                        |
 |  562 | CKV_AZURE_132 | resource                         | Microsoft.DocumentDB/databaseAccounts                                        | Ensure cosmosdb does not allow privileged escalation by restricting management plane changes                                                                                                             | arm                              |
 |  563 | CKV2_AZURE_1  | resource                         | azurerm_storage_account                                                      | Ensure storage for critical data are encrypted with Customer Managed Key                                                                                                                                 | Terraform                        |
-|  564 | CKV2_AZURE_2  | resource                         | azurerm_sql_server                                                           | Ensure that Vulnerability Assessment (VA) is enabled on a SQL server by setting a Storage Account                                                                                                        | Terraform                        |
-|  565 | CKV2_AZURE_2  | resource                         | azurerm_mssql_server_security_alert_policy                                   | Ensure that Vulnerability Assessment (VA) is enabled on a SQL server by setting a Storage Account                                                                                                        | Terraform                        |
-|  566 | CKV2_AZURE_3  | resource                         | azurerm_sql_server                                                           | Ensure that VA setting Periodic Recurring Scans is enabled on a SQL server                                                                                                                               | Terraform                        |
-|  567 | CKV2_AZURE_3  | resource                         | azurerm_mssql_server                                                         | Ensure that VA setting Periodic Recurring Scans is enabled on a SQL server                                                                                                                               | Terraform                        |
-|  568 | CKV2_AZURE_3  | resource                         | azurerm_mssql_server_vulnerability_assessment                                | Ensure that VA setting Periodic Recurring Scans is enabled on a SQL server                                                                                                                               | Terraform                        |
-|  569 | CKV2_AZURE_3  | resource                         | azurerm_mssql_server_security_alert_policy                                   | Ensure that VA setting Periodic Recurring Scans is enabled on a SQL server                                                                                                                               | Terraform                        |
-|  570 | CKV2_AZURE_4  | resource                         | azurerm_sql_server                                                           | Ensure Azure SQL server ADS VA Send scan reports to is configured                                                                                                                                        | Terraform                        |
-|  571 | CKV2_AZURE_4  | resource                         | azurerm_mssql_server                                                         | Ensure Azure SQL server ADS VA Send scan reports to is configured                                                                                                                                        | Terraform                        |
-|  572 | CKV2_AZURE_4  | resource                         | azurerm_mssql_server_vulnerability_assessment                                | Ensure Azure SQL server ADS VA Send scan reports to is configured                                                                                                                                        | Terraform                        |
-|  573 | CKV2_AZURE_4  | resource                         | azurerm_mssql_server_security_alert_policy                                   | Ensure Azure SQL server ADS VA Send scan reports to is configured                                                                                                                                        | Terraform                        |
-|  574 | CKV2_AZURE_5  | resource                         | azurerm_sql_server                                                           | Ensure that VA setting 'Also send email notifications to admins and subscription owners' is set for a SQL server                                                                                         | Terraform                        |
-|  575 | CKV2_AZURE_5  | resource                         | azurerm_mssql_server                                                         | Ensure that VA setting 'Also send email notifications to admins and subscription owners' is set for a SQL server                                                                                         | Terraform                        |
-|  576 | CKV2_AZURE_5  | resource                         | azurerm_mssql_server_vulnerability_assessment                                | Ensure that VA setting 'Also send email notifications to admins and subscription owners' is set for a SQL server                                                                                         | Terraform                        |
-|  577 | CKV2_AZURE_5  | resource                         | azurerm_mssql_server_security_alert_policy                                   | Ensure that VA setting 'Also send email notifications to admins and subscription owners' is set for a SQL server                                                                                         | Terraform                        |
-|  578 | CKV2_AZURE_6  | resource                         | azurerm_sql_server                                                           | Ensure 'Allow access to Azure services' for PostgreSQL Database Server is disabled                                                                                                                       | Terraform                        |
-|  579 | CKV2_AZURE_6  | resource                         | azurerm_sql_firewall_rule                                                    | Ensure 'Allow access to Azure services' for PostgreSQL Database Server is disabled                                                                                                                       | Terraform                        |
+|  564 | CKV2_AZURE_2  | resource                         | azurerm_mssql_server_security_alert_policy                                   | Ensure that Vulnerability Assessment (VA) is enabled on a SQL server by setting a Storage Account                                                                                                        | Terraform                        |
+|  565 | CKV2_AZURE_2  | resource                         | azurerm_sql_server                                                           | Ensure that Vulnerability Assessment (VA) is enabled on a SQL server by setting a Storage Account                                                                                                        | Terraform                        |
+|  566 | CKV2_AZURE_3  | resource                         | azurerm_mssql_server_vulnerability_assessment                                | Ensure that VA setting Periodic Recurring Scans is enabled on a SQL server                                                                                                                               | Terraform                        |
+|  567 | CKV2_AZURE_3  | resource                         | azurerm_mssql_server_security_alert_policy                                   | Ensure that VA setting Periodic Recurring Scans is enabled on a SQL server                                                                                                                               | Terraform                        |
+|  568 | CKV2_AZURE_3  | resource                         | azurerm_mssql_server                                                         | Ensure that VA setting Periodic Recurring Scans is enabled on a SQL server                                                                                                                               | Terraform                        |
+|  569 | CKV2_AZURE_3  | resource                         | azurerm_sql_server                                                           | Ensure that VA setting Periodic Recurring Scans is enabled on a SQL server                                                                                                                               | Terraform                        |
+|  570 | CKV2_AZURE_4  | resource                         | azurerm_mssql_server_vulnerability_assessment                                | Ensure Azure SQL server ADS VA Send scan reports to is configured                                                                                                                                        | Terraform                        |
+|  571 | CKV2_AZURE_4  | resource                         | azurerm_mssql_server_security_alert_policy                                   | Ensure Azure SQL server ADS VA Send scan reports to is configured                                                                                                                                        | Terraform                        |
+|  572 | CKV2_AZURE_4  | resource                         | azurerm_mssql_server                                                         | Ensure Azure SQL server ADS VA Send scan reports to is configured                                                                                                                                        | Terraform                        |
+|  573 | CKV2_AZURE_4  | resource                         | azurerm_sql_server                                                           | Ensure Azure SQL server ADS VA Send scan reports to is configured                                                                                                                                        | Terraform                        |
+|  574 | CKV2_AZURE_5  | resource                         | azurerm_mssql_server_vulnerability_assessment                                | Ensure that VA setting 'Also send email notifications to admins and subscription owners' is set for a SQL server                                                                                         | Terraform                        |
+|  575 | CKV2_AZURE_5  | resource                         | azurerm_mssql_server_security_alert_policy                                   | Ensure that VA setting 'Also send email notifications to admins and subscription owners' is set for a SQL server                                                                                         | Terraform                        |
+|  576 | CKV2_AZURE_5  | resource                         | azurerm_mssql_server                                                         | Ensure that VA setting 'Also send email notifications to admins and subscription owners' is set for a SQL server                                                                                         | Terraform                        |
+|  577 | CKV2_AZURE_5  | resource                         | azurerm_sql_server                                                           | Ensure that VA setting 'Also send email notifications to admins and subscription owners' is set for a SQL server                                                                                         | Terraform                        |
+|  578 | CKV2_AZURE_6  | resource                         | azurerm_sql_firewall_rule                                                    | Ensure 'Allow access to Azure services' for PostgreSQL Database Server is disabled                                                                                                                       | Terraform                        |
+|  579 | CKV2_AZURE_6  | resource                         | azurerm_sql_server                                                           | Ensure 'Allow access to Azure services' for PostgreSQL Database Server is disabled                                                                                                                       | Terraform                        |
 |  580 | CKV2_AZURE_7  | resource                         | azurerm_sql_server                                                           | Ensure that Azure Active Directory Admin is configured                                                                                                                                                   | Terraform                        |
 |  581 | CKV2_AZURE_8  | resource                         | azurerm_storage_container                                                    | Ensure the storage container storing the activity logs is not publicly accessible                                                                                                                        | Terraform                        |
 |  582 | CKV2_AZURE_8  | resource                         | azurerm_monitor_activity_log_alert                                           | Ensure the storage container storing the activity logs is not publicly accessible                                                                                                                        | Terraform                        |
 |  583 | CKV2_AZURE_9  | resource                         | azurerm_virtual_machine                                                      | Ensure Virtual Machines are utilizing Managed Disks                                                                                                                                                      | Terraform                        |
-|  584 | CKV2_AZURE_10 | resource                         | azurerm_virtual_machine_extension                                            | Ensure that Microsoft Antimalware is configured to automatically updates for Virtual Machines                                                                                                            | Terraform                        |
-|  585 | CKV2_AZURE_10 | resource                         | azurerm_virtual_machine                                                      | Ensure that Microsoft Antimalware is configured to automatically updates for Virtual Machines                                                                                                            | Terraform                        |
+|  584 | CKV2_AZURE_10 | resource                         | azurerm_virtual_machine                                                      | Ensure that Microsoft Antimalware is configured to automatically updates for Virtual Machines                                                                                                            | Terraform                        |
+|  585 | CKV2_AZURE_10 | resource                         | azurerm_virtual_machine_extension                                            | Ensure that Microsoft Antimalware is configured to automatically updates for Virtual Machines                                                                                                            | Terraform                        |
 |  586 | CKV2_AZURE_11 | resource                         | azurerm_kusto_cluster                                                        | Ensure that Azure Data Explorer encryption at rest uses a customer-managed key                                                                                                                           | Terraform                        |
 |  587 | CKV2_AZURE_12 | resource                         | azurerm_virtual_machine                                                      | Ensure that virtual machines are backed up using Azure Backup                                                                                                                                            | Terraform                        |
-|  588 | CKV2_AZURE_13 | resource                         | azurerm_sql_server                                                           | Ensure that sql servers enables data security policy                                                                                                                                                     | Terraform                        |
-|  589 | CKV2_AZURE_13 | resource                         | azurerm_mssql_server_security_alert_policy                                   | Ensure that sql servers enables data security policy                                                                                                                                                     | Terraform                        |
-|  590 | CKV2_AZURE_14 | resource                         | azurerm_managed_disk                                                         | Ensure that Unattached disks are encrypted                                                                                                                                                               | Terraform                        |
-|  591 | CKV2_AZURE_14 | resource                         | azurerm_virtual_machine                                                      | Ensure that Unattached disks are encrypted                                                                                                                                                               | Terraform                        |
+|  588 | CKV2_AZURE_13 | resource                         | azurerm_mssql_server_security_alert_policy                                   | Ensure that sql servers enables data security policy                                                                                                                                                     | Terraform                        |
+|  589 | CKV2_AZURE_13 | resource                         | azurerm_sql_server                                                           | Ensure that sql servers enables data security policy                                                                                                                                                     | Terraform                        |
+|  590 | CKV2_AZURE_14 | resource                         | azurerm_virtual_machine                                                      | Ensure that Unattached disks are encrypted                                                                                                                                                               | Terraform                        |
+|  591 | CKV2_AZURE_14 | resource                         | azurerm_managed_disk                                                         | Ensure that Unattached disks are encrypted                                                                                                                                                               | Terraform                        |
 |  592 | CKV2_AZURE_15 | resource                         | azurerm_data_factory                                                         | Ensure that Azure data factories are encrypted with a customer-managed key                                                                                                                               | Terraform                        |
-|  593 | CKV2_AZURE_16 | resource                         | azurerm_mysql_server_key                                                     | Ensure that MySQL server enables customer-managed key for encryption                                                                                                                                     | Terraform                        |
-|  594 | CKV2_AZURE_16 | resource                         | azurerm_mysql_server                                                         | Ensure that MySQL server enables customer-managed key for encryption                                                                                                                                     | Terraform                        |
+|  593 | CKV2_AZURE_16 | resource                         | azurerm_mysql_server                                                         | Ensure that MySQL server enables customer-managed key for encryption                                                                                                                                     | Terraform                        |
+|  594 | CKV2_AZURE_16 | resource                         | azurerm_mysql_server_key                                                     | Ensure that MySQL server enables customer-managed key for encryption                                                                                                                                     | Terraform                        |
 |  595 | CKV2_AZURE_17 | resource                         | azurerm_postgresql_server                                                    | Ensure that PostgreSQL server enables customer-managed key for encryption                                                                                                                                | Terraform                        |
 |  596 | CKV2_AZURE_17 | resource                         | azurerm_postgresql_server_key                                                | Ensure that PostgreSQL server enables customer-managed key for encryption                                                                                                                                | Terraform                        |
 |  597 | CKV2_AZURE_18 | resource                         | azurerm_storage_account_customer_managed_key                                 | Ensure that Storage Accounts use customer-managed key for encryption                                                                                                                                     | Terraform                        |
 |  598 | CKV2_AZURE_18 | resource                         | azurerm_storage_account                                                      | Ensure that Storage Accounts use customer-managed key for encryption                                                                                                                                     | Terraform                        |
 |  599 | CKV2_AZURE_19 | resource                         | azurerm_synapse_workspace                                                    | Ensure that Azure Synapse workspaces have no IP firewall rules attached                                                                                                                                  | Terraform                        |
 |  600 | CKV2_AZURE_20 | resource                         | azurerm_log_analytics_storage_insights                                       | Ensure Storage logging is enabled for Table service for read requests                                                                                                                                    | Terraform                        |
-|  601 | CKV2_AZURE_20 | resource                         | azurerm_storage_table                                                        | Ensure Storage logging is enabled for Table service for read requests                                                                                                                                    | Terraform                        |
-|  602 | CKV2_AZURE_20 | resource                         | azurerm_storage_account                                                      | Ensure Storage logging is enabled for Table service for read requests                                                                                                                                    | Terraform                        |
-|  603 | CKV2_AZURE_21 | resource                         | azurerm_log_analytics_storage_insights                                       | Ensure Storage logging is enabled for Blob service for read requests                                                                                                                                     | Terraform                        |
+|  601 | CKV2_AZURE_20 | resource                         | azurerm_storage_account                                                      | Ensure Storage logging is enabled for Table service for read requests                                                                                                                                    | Terraform                        |
+|  602 | CKV2_AZURE_20 | resource                         | azurerm_storage_table                                                        | Ensure Storage logging is enabled for Table service for read requests                                                                                                                                    | Terraform                        |
+|  603 | CKV2_AZURE_21 | resource                         | azurerm_storage_account                                                      | Ensure Storage logging is enabled for Blob service for read requests                                                                                                                                     | Terraform                        |
 |  604 | CKV2_AZURE_21 | resource                         | azurerm_storage_container                                                    | Ensure Storage logging is enabled for Blob service for read requests                                                                                                                                     | Terraform                        |
-|  605 | CKV2_AZURE_21 | resource                         | azurerm_storage_account                                                      | Ensure Storage logging is enabled for Blob service for read requests                                                                                                                                     | Terraform                        |
+|  605 | CKV2_AZURE_21 | resource                         | azurerm_log_analytics_storage_insights                                       | Ensure Storage logging is enabled for Blob service for read requests                                                                                                                                     | Terraform                        |
 |  606 | CKV_BCW_1     | provider                         | bridgecrew                                                                   | Ensure no hard coded API token exist in the provider                                                                                                                                                     | Terraform                        |
 |  607 | CKV_DOCKER_1  | dockerfile                       | EXPOSE                                                                       | Ensure port 22 is not exposed                                                                                                                                                                            | dockerfile                       |
 |  608 | CKV_DOCKER_2  | dockerfile                       | *                                                                            | Ensure that HEALTHCHECK instructions have been added to container images                                                                                                                                 | dockerfile                       |
@@ -707,279 +707,279 @@ nav_order: 1
 |  696 | CKV_GCP_72    | resource                         | google_container_node_pool                                                   | Ensure Integrity Monitoring for Shielded GKE Nodes is Enabled                                                                                                                                            | Terraform                        |
 |  697 | CKV2_GCP_1    | resource                         | google_project_default_service_accounts                                      | Ensure GKE clusters are not running using the Compute Engine default service account                                                                                                                     | Terraform                        |
 |  698 | CKV2_GCP_2    | resource                         | google_compute_network                                                       | Ensure legacy networks do not exist for a project                                                                                                                                                        | Terraform                        |
-|  699 | CKV2_GCP_3    | resource                         | google_compute_firewall                                                      | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  700 | CKV2_GCP_3    | resource                         | google_sql_user                                                              | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  701 | CKV2_GCP_3    | resource                         | google_compute_region_autoscaler                                             | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  702 | CKV2_GCP_3    | resource                         | google_cloud_run_service                                                     | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  703 | CKV2_GCP_3    | resource                         | google_compute_network_endpoint_group                                        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  704 | CKV2_GCP_3    | resource                         | google_compute_region_health_check                                           | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  705 | CKV2_GCP_3    | resource                         | google_compute_http_health_check                                             | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  706 | CKV2_GCP_3    | resource                         | google_cloud_asset_project_feed                                              | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  707 | CKV2_GCP_3    | resource                         | google_compute_region_backend_service                                        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  708 | CKV2_GCP_3    | resource                         | google_compute_address                                                       | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  709 | CKV2_GCP_3    | resource                         | google_sql_source_representation_instance                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  710 | CKV2_GCP_3    | resource                         | google_redis_instance                                                        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  711 | CKV2_GCP_3    | resource                         | google_bigquery_job                                                          | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  712 | CKV2_GCP_3    | resource                         | google_tpu_node                                                              | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  713 | CKV2_GCP_3    | resource                         | google_iap_app_engine_version_iam                                            | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  714 | CKV2_GCP_3    | resource                         | google_organization_iam_binding                                              | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  715 | CKV2_GCP_3    | resource                         | google_deployment_manager_deployment                                         | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  716 | CKV2_GCP_3    | resource                         | google_compute_ssl_certificate                                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  717 | CKV2_GCP_3    | resource                         | google_dataflow_flex_template_job                                            | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  718 | CKV2_GCP_3    | resource                         | google_cloud_scheduler_job                                                   | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  719 | CKV2_GCP_3    | resource                         | google_data_catalog_tag_template                                             | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  720 | CKV2_GCP_3    | resource                         | google_compute_snapshot                                                      | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  721 | CKV2_GCP_3    | resource                         | google_compute_global_address                                                | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  722 | CKV2_GCP_3    | resource                         | google_dialogflow_agent                                                      | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  723 | CKV2_GCP_3    | resource                         | google_compute_region_ssl_certificate                                        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  724 | CKV2_GCP_3    | resource                         | google_bigquery_dataset                                                      | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  725 | CKV2_GCP_3    | resource                         | google_iap_web_backend_service_iam                                           | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  726 | CKV2_GCP_3    | resource                         | google_bigquery_dataset_access                                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  727 | CKV2_GCP_3    | resource                         | google_logging_project_bucket_config                                         | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  728 | CKV2_GCP_3    | resource                         | google_project                                                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  729 | CKV2_GCP_3    | resource                         | google_logging_organization_bucket_config                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  730 | CKV2_GCP_3    | resource                         | google_sql_database                                                          | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  731 | CKV2_GCP_3    | resource                         | google_compute_subnetwork_iam                                                | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  732 | CKV2_GCP_3    | resource                         | google_compute_region_disk_resource_policy_attachment                        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  733 | CKV2_GCP_3    | resource                         | google_app_engine_service_split_traffic                                      | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  734 | CKV2_GCP_3    | resource                         | google_compute_attached_disk                                                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  735 | CKV2_GCP_3    | resource                         | google_network_management_connectivity_test_resource                         | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  736 | CKV2_GCP_3    | resource                         | google_compute_node_template                                                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  737 | CKV2_GCP_3    | resource                         | google_storage_transfer_job                                                  | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  738 | CKV2_GCP_3    | resource                         | google_spanner_instance_iam                                                  | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  739 | CKV2_GCP_3    | resource                         | google_monitoring_slo                                                        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  740 | CKV2_GCP_3    | resource                         | google_healthcare_fhir_store_iam                                             | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  741 | CKV2_GCP_3    | resource                         | google_iap_web_iam                                                           | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  742 | CKV2_GCP_3    | resource                         | google_service_networking_connection                                         | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  699 | CKV2_GCP_3    | resource                         | google_healthcare_dataset_iam                                                | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  700 | CKV2_GCP_3    | resource                         | google_organization_iam_member                                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  701 | CKV2_GCP_3    | resource                         | google_sql_ssl_cert                                                          | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  702 | CKV2_GCP_3    | resource                         | google_container_analysis_occurrence                                         | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  703 | CKV2_GCP_3    | resource                         | google_secret_manager_secret_iam                                             | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  704 | CKV2_GCP_3    | resource                         | google_cloud_run_service                                                     | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  705 | CKV2_GCP_3    | resource                         | google_network_management_connectivity_test_resource                         | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  706 | CKV2_GCP_3    | resource                         | google_compute_network_endpoint                                              | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  707 | CKV2_GCP_3    | resource                         | google_project_iam_custom_role                                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  708 | CKV2_GCP_3    | resource                         | google_dataflow_job                                                          | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  709 | CKV2_GCP_3    | resource                         | google_pubsub_subscription                                                   | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  710 | CKV2_GCP_3    | resource                         | google_compute_vpn_tunnel                                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  711 | CKV2_GCP_3    | resource                         | google_project                                                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  712 | CKV2_GCP_3    | resource                         | google_healthcare_hl7_v2_store                                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  713 | CKV2_GCP_3    | resource                         | google_cloudfunctions_cloud_function_iam                                     | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  714 | CKV2_GCP_3    | resource                         | google_spanner_instance_iam                                                  | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  715 | CKV2_GCP_3    | resource                         | google_cloud_asset_organization_feed                                         | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  716 | CKV2_GCP_3    | resource                         | google_storage_notification                                                  | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  717 | CKV2_GCP_3    | resource                         | google_cloud_run_service_iam                                                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  718 | CKV2_GCP_3    | resource                         | google_storage_hmac_key                                                      | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  719 | CKV2_GCP_3    | resource                         | google_dataproc_cluster_iam                                                  | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  720 | CKV2_GCP_3    | resource                         | google_folder_iam_member                                                     | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  721 | CKV2_GCP_3    | resource                         | google_cloud_asset_folder_feed                                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  722 | CKV2_GCP_3    | resource                         | google_service_account_iam                                                   | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  723 | CKV2_GCP_3    | resource                         | google_compute_router_nat                                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  724 | CKV2_GCP_3    | resource                         | google_data_catalog_tag_template                                             | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  725 | CKV2_GCP_3    | resource                         | google_storage_default_object_access_control                                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  726 | CKV2_GCP_3    | resource                         | google_identity_platform_tenant                                              | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  727 | CKV2_GCP_3    | resource                         | google_compute_region_ssl_certificate                                        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  728 | CKV2_GCP_3    | resource                         | google_resource_manager_lien                                                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  729 | CKV2_GCP_3    | resource                         | google_compute_image                                                         | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  730 | CKV2_GCP_3    | resource                         | google_bigquery_data_transfer_config                                         | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  731 | CKV2_GCP_3    | resource                         | google_logging_project_bucket_config                                         | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  732 | CKV2_GCP_3    | resource                         | google_compute_instance_group_manager                                        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  733 | CKV2_GCP_3    | resource                         | google_compute_network_peering_routes_config                                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  734 | CKV2_GCP_3    | resource                         | google_kms_secret_ciphertext                                                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  735 | CKV2_GCP_3    | resource                         | google_iap_tunnel_instance_iam                                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  736 | CKV2_GCP_3    | resource                         | google_project_iam                                                           | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  737 | CKV2_GCP_3    | resource                         | google_logging_organization_bucket_config                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  738 | CKV2_GCP_3    | resource                         | google_app_engine_domain_mapping                                             | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  739 | CKV2_GCP_3    | resource                         | google_deployment_manager_deployment                                         | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  740 | CKV2_GCP_3    | resource                         | google_container_analysis_note                                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  741 | CKV2_GCP_3    | resource                         | google_compute_global_network_endpoint_group                                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  742 | CKV2_GCP_3    | resource                         | google_logging_folder_sink                                                   | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
 |  743 | CKV2_GCP_3    | resource                         | google_compute_network                                                       | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  744 | CKV2_GCP_3    | resource                         | google_project_iam_member                                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  745 | CKV2_GCP_3    | resource                         | google_spanner_instance                                                      | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  746 | CKV2_GCP_3    | resource                         | google_runtimeconfig_variable                                                | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  747 | CKV2_GCP_3    | resource                         | google_logging_folder_sink                                                   | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  748 | CKV2_GCP_3    | resource                         | google_monitoring_service                                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  749 | CKV2_GCP_3    | resource                         | google_data_catalog_tag                                                      | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  750 | CKV2_GCP_3    | resource                         | google_compute_url_map                                                       | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  751 | CKV2_GCP_3    | resource                         | google_healthcare_hl7_v2_store                                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  752 | CKV2_GCP_3    | resource                         | google_storage_default_object_acl                                            | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  753 | CKV2_GCP_3    | resource                         | google_compute_global_forwarding_rule                                        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  754 | CKV2_GCP_3    | resource                         | google_bigtable_app_profile                                                  | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  755 | CKV2_GCP_3    | resource                         | google_compute_project_metadata                                              | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  756 | CKV2_GCP_3    | resource                         | google_project_service                                                       | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  757 | CKV2_GCP_3    | resource                         | google_compute_resource_policy                                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  758 | CKV2_GCP_3    | resource                         | google_project_iam                                                           | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  759 | CKV2_GCP_3    | resource                         | google_storage_bucket                                                        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  760 | CKV2_GCP_3    | resource                         | google_storage_object_acl                                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  761 | CKV2_GCP_3    | resource                         | google_compute_network_peering_routes_config                                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  762 | CKV2_GCP_3    | resource                         | google_compute_instance_iam                                                  | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  763 | CKV2_GCP_3    | resource                         | google_logging_organization_sink                                             | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  764 | CKV2_GCP_3    | resource                         | google_app_engine_application                                                | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  765 | CKV2_GCP_3    | resource                         | google_app_engine_flexible_app_version                                       | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  766 | CKV2_GCP_3    | resource                         | google_service_account                                                       | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  767 | CKV2_GCP_3    | resource                         | google_cloud_tasks_queue                                                     | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  768 | CKV2_GCP_3    | resource                         | google_bigtable_table                                                        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  769 | CKV2_GCP_3    | resource                         | google_endpoints_service                                                     | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  770 | CKV2_GCP_3    | resource                         | google_dns_record_set                                                        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  771 | CKV2_GCP_3    | resource                         | google_identity_platform_default_supported_idp_config                        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  772 | CKV2_GCP_3    | resource                         | google_secret_manager_secret_iam                                             | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  773 | CKV2_GCP_3    | resource                         | google_billing_account_iam_member                                            | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  774 | CKV2_GCP_3    | resource                         | google_container_analysis_note                                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  775 | CKV2_GCP_3    | resource                         | google_binary_authorization_attestor                                         | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  776 | CKV2_GCP_3    | resource                         | google_dataproc_autoscaling_policy                                           | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  777 | CKV2_GCP_3    | resource                         | google_logging_metric                                                        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  778 | CKV2_GCP_3    | resource                         | google_healthcare_fhir_store                                                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  779 | CKV2_GCP_3    | resource                         | google_project_organization_policy                                           | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  780 | CKV2_GCP_3    | resource                         | google_compute_target_instance                                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  781 | CKV2_GCP_3    | resource                         | google_cloudfunctions_cloud_function_iam                                     | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  782 | CKV2_GCP_3    | resource                         | google_service_account_key                                                   | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  783 | CKV2_GCP_3    | resource                         | google_pubsub_subscription_iam                                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  784 | CKV2_GCP_3    | resource                         | google_sql_database_instance                                                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  785 | CKV2_GCP_3    | resource                         | google_storage_bucket_acl                                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  786 | CKV2_GCP_3    | resource                         | google_app_engine_application_url_dispatch_rules                             | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  787 | CKV2_GCP_3    | resource                         | google_spanner_database                                                      | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  788 | CKV2_GCP_3    | resource                         | google_compute_instance_from_template                                        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  789 | CKV2_GCP_3    | resource                         | google_dataflow_job                                                          | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  790 | CKV2_GCP_3    | resource                         | google_compute_router_bgp_peer                                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  791 | CKV2_GCP_3    | resource                         | google_folder_iam_binding                                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  792 | CKV2_GCP_3    | resource                         | google_folder_iam_member                                                     | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  793 | CKV2_GCP_3    | resource                         | google_compute_autoscaler                                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  794 | CKV2_GCP_3    | resource                         | google_compute_project_default_network_tier                                  | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  795 | CKV2_GCP_3    | resource                         | google_compute_target_https_proxy                                            | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  796 | CKV2_GCP_3    | resource                         | google_compute_region_target_http_proxy                                      | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  797 | CKV2_GCP_3    | resource                         | google_healthcare_hl7_v2_store_iam                                           | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  798 | CKV2_GCP_3    | resource                         | google_organization_iam_custom_role                                          | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  799 | CKV2_GCP_3    | resource                         | google_compute_region_url_map                                                | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  800 | CKV2_GCP_3    | resource                         | google_pubsub_topic_iam                                                      | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  801 | CKV2_GCP_3    | resource                         | google_spanner_database_iam                                                  | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  802 | CKV2_GCP_3    | resource                         | google_kms_crypto_key                                                        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  803 | CKV2_GCP_3    | resource                         | google_data_catalog_entry_group                                              | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  804 | CKV2_GCP_3    | resource                         | google_compute_node_group                                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  805 | CKV2_GCP_3    | resource                         | google_compute_image                                                         | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  806 | CKV2_GCP_3    | resource                         | google_bigquery_dataset_iam                                                  | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  807 | CKV2_GCP_3    | resource                         | google_compute_region_instance_group_manager                                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  808 | CKV2_GCP_3    | resource                         | google_runtimeconfig_config                                                  | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  809 | CKV2_GCP_3    | resource                         | google_vpc_access_connector                                                  | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  810 | CKV2_GCP_3    | resource                         | google_binary_authorization_policy                                           | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  811 | CKV2_GCP_3    | resource                         | google_binary_authorization_attestor_iam                                     | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  812 | CKV2_GCP_3    | resource                         | google_folder_iam_audit_config                                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  813 | CKV2_GCP_3    | resource                         | google_compute_region_target_https_proxy                                     | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  814 | CKV2_GCP_3    | resource                         | google_compute_router                                                        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  815 | CKV2_GCP_3    | resource                         | google_secret_manager_secret_version                                         | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  816 | CKV2_GCP_3    | resource                         | google_compute_health_check                                                  | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  817 | CKV2_GCP_3    | resource                         | google_compute_project_metadata_item                                         | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  818 | CKV2_GCP_3    | resource                         | google_storage_bucket_object                                                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  819 | CKV2_GCP_3    | resource                         | google_sql_ssl_cert                                                          | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  820 | CKV2_GCP_3    | resource                         | google_storage_default_object_access_control                                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  821 | CKV2_GCP_3    | resource                         | google_firestore_index                                                       | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  822 | CKV2_GCP_3    | resource                         | google_identity_platform_inbound_saml_config                                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  823 | CKV2_GCP_3    | resource                         | google_compute_vpn_tunnel                                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  824 | CKV2_GCP_3    | resource                         | google_cloudiot_device                                                       | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  825 | CKV2_GCP_3    | resource                         | google_folder_iam_policy                                                     | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  826 | CKV2_GCP_3    | resource                         | google_folder_organization_policy                                            | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  827 | CKV2_GCP_3    | resource                         | google_compute_https_health_check                                            | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  828 | CKV2_GCP_3    | resource                         | google_container_registry                                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  829 | CKV2_GCP_3    | resource                         | google_monitoring_alert_policy                                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  830 | CKV2_GCP_3    | resource                         | google_sourcerepo_repository_iam                                             | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  831 | CKV2_GCP_3    | resource                         | google_pubsub_topic                                                          | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  832 | CKV2_GCP_3    | resource                         | google_composer_environment                                                  | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  833 | CKV2_GCP_3    | resource                         | google_cloud_run_service_iam                                                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  834 | CKV2_GCP_3    | resource                         | google_compute_global_network_endpoint                                       | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  835 | CKV2_GCP_3    | resource                         | google_identity_platform_tenant_inbound_saml_config                          | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  836 | CKV2_GCP_3    | resource                         | google_compute_security_policy                                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  837 | CKV2_GCP_3    | resource                         | google_folder                                                                | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  838 | CKV2_GCP_3    | resource                         | google_compute_subnetwork                                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  839 | CKV2_GCP_3    | resource                         | google_iap_brand                                                             | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  840 | CKV2_GCP_3    | resource                         | google_compute_router_interface                                              | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  841 | CKV2_GCP_3    | resource                         | google_bigquery_data_transfer_config                                         | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  842 | CKV2_GCP_3    | resource                         | google_organization_policy                                                   | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  843 | CKV2_GCP_3    | resource                         | google_logging_organization_exclusion                                        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  844 | CKV2_GCP_3    | resource                         | google_compute_reservation                                                   | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  845 | CKV2_GCP_3    | resource                         | google_datastore_index                                                       | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  846 | CKV2_GCP_3    | resource                         | google_bigtable_gc_policy                                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  847 | CKV2_GCP_3    | resource                         | google_compute_instance                                                      | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  848 | CKV2_GCP_3    | resource                         | google_app_engine_firewall_rule                                              | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  849 | CKV2_GCP_3    | resource                         | google_storage_bucket_iam_binding                                            | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  850 | CKV2_GCP_3    | resource                         | google_storage_notification                                                  | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  851 | CKV2_GCP_3    | resource                         | google_identity_platform_oauth_idp_config                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  852 | CKV2_GCP_3    | resource                         | google_compute_vpn_gateway                                                   | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  853 | CKV2_GCP_3    | resource                         | google_kms_key_ring_import_job                                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  854 | CKV2_GCP_3    | resource                         | google_dataproc_job                                                          | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  855 | CKV2_GCP_3    | resource                         | google_cloud_asset_folder_feed                                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  856 | CKV2_GCP_3    | resource                         | google_healthcare_dataset_iam                                                | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  857 | CKV2_GCP_3    | resource                         | google_cloudiot_device_registry                                              | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  858 | CKV2_GCP_3    | resource                         | google_organization_iam_policy                                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  859 | CKV2_GCP_3    | resource                         | google_storage_bucket_iam                                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  860 | CKV2_GCP_3    | resource                         | google_access_context_manager_access_level                                   | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  861 | CKV2_GCP_3    | resource                         | google_runtimeconfig_config_iam                                              | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  862 | CKV2_GCP_3    | resource                         | google_billing_account_iam_policy                                            | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  863 | CKV2_GCP_3    | resource                         | google_access_context_manager_service_perimeter                              | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  864 | CKV2_GCP_3    | resource                         | google_dialogflow_intent                                                     | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  865 | CKV2_GCP_3    | resource                         | google_container_cluster                                                     | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  866 | CKV2_GCP_3    | resource                         | google_compute_interconnect_attachment                                       | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  867 | CKV2_GCP_3    | resource                         | google_compute_backend_service                                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  868 | CKV2_GCP_3    | resource                         | google_dataproc_cluster_iam                                                  | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  869 | CKV2_GCP_3    | resource                         | google_healthcare_dicom_store                                                | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  870 | CKV2_GCP_3    | resource                         | google_monitoring_notification_channel                                       | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  871 | CKV2_GCP_3    | resource                         | google_app_engine_domain_mapping                                             | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  872 | CKV2_GCP_3    | resource                         | google_compute_backend_bucket                                                | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  873 | CKV2_GCP_3    | resource                         | google_compute_route                                                         | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  874 | CKV2_GCP_3    | resource                         | google_cloudbuild_trigger                                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  875 | CKV2_GCP_3    | resource                         | google_identity_platform_tenant_default_supported_idp_config                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  876 | CKV2_GCP_3    | resource                         | google_ml_engine_model                                                       | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  877 | CKV2_GCP_3    | resource                         | google_compute_shared_vpc_host_project                                       | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  878 | CKV2_GCP_3    | resource                         | google_scc_source                                                            | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  879 | CKV2_GCP_3    | resource                         | google_iap_web_type_compute_iam                                              | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  880 | CKV2_GCP_3    | resource                         | google_compute_shared_vpc_service_project                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  881 | CKV2_GCP_3    | resource                         | google_identity_platform_tenant_oauth_idp_config                             | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  882 | CKV2_GCP_3    | resource                         | google_logging_project_sink                                                  | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  883 | CKV2_GCP_3    | resource                         | google_bigtable_instance_iam                                                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  884 | CKV2_GCP_3    | resource                         | google_kms_crypto_key_iam                                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  885 | CKV2_GCP_3    | resource                         | google_container_analysis_occurrence                                         | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  886 | CKV2_GCP_3    | resource                         | google_monitoring_group                                                      | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  887 | CKV2_GCP_3    | resource                         | google_os_login_ssh_public_key                                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  888 | CKV2_GCP_3    | resource                         | google_access_context_manager_access_policy                                  | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  889 | CKV2_GCP_3    | resource                         | google_pubsub_subscription                                                   | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  890 | CKV2_GCP_3    | resource                         | google_cloud_run_domain_mapping                                              | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  891 | CKV2_GCP_3    | resource                         | google_iap_web_type_app_engine_iam                                           | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  892 | CKV2_GCP_3    | resource                         | google_compute_target_http_proxy                                             | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  893 | CKV2_GCP_3    | resource                         | google_storage_bucket_access_control                                         | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  894 | CKV2_GCP_3    | resource                         | google_billing_account_iam_binding                                           | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  895 | CKV2_GCP_3    | resource                         | google_dialogflow_entity_type                                                | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  896 | CKV2_GCP_3    | resource                         | google_kms_secret_ciphertext                                                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  897 | CKV2_GCP_3    | resource                         | google_bigquery_table                                                        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  898 | CKV2_GCP_3    | resource                         | google_logging_billing_account_exclusion                                     | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  899 | CKV2_GCP_3    | resource                         | google_monitoring_uptime_check_config                                        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  900 | CKV2_GCP_3    | resource                         | google_app_engine_standard_app_version                                       | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  901 | CKV2_GCP_3    | resource                         | google_bigtable_instance                                                     | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  902 | CKV2_GCP_3    | resource                         | google_dns_policy                                                            | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  903 | CKV2_GCP_3    | resource                         | google_project_iam_binding                                                   | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  904 | CKV2_GCP_3    | resource                         | google_service_account_iam                                                   | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  905 | CKV2_GCP_3    | resource                         | google_logging_billing_account_bucket_config                                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  906 | CKV2_GCP_3    | resource                         | google_storage_hmac_key                                                      | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  907 | CKV2_GCP_3    | resource                         | google_organization_iam_member                                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  908 | CKV2_GCP_3    | resource                         | google_compute_router_nat                                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  909 | CKV2_GCP_3    | resource                         | google_resource_manager_lien                                                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  910 | CKV2_GCP_3    | resource                         | google_monitoring_dashboard                                                  | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  911 | CKV2_GCP_3    | resource                         | google_logging_folder_exclusion                                              | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  912 | CKV2_GCP_3    | resource                         | google_cloud_asset_organization_feed                                         | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  913 | CKV2_GCP_3    | resource                         | google_active_directory_domain                                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  914 | CKV2_GCP_3    | resource                         | google_logging_folder_bucket_config                                          | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  915 | CKV2_GCP_3    | resource                         | google_compute_global_network_endpoint_group                                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  916 | CKV2_GCP_3    | resource                         | google_project_iam_custom_role                                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  917 | CKV2_GCP_3    | resource                         | google_compute_instance_group_named_port                                     | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  918 | CKV2_GCP_3    | resource                         | google_compute_instance_group_manager                                        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  919 | CKV2_GCP_3    | resource                         | google_iap_app_engine_service_iam                                            | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  920 | CKV2_GCP_3    | resource                         | google_sourcerepo_repository                                                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  921 | CKV2_GCP_3    | resource                         | google_cloudfunctions_function                                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  922 | CKV2_GCP_3    | resource                         | google_logging_project_exclusion                                             | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  923 | CKV2_GCP_3    | resource                         | google_iap_tunnel_instance_iam                                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  924 | CKV2_GCP_3    | resource                         | google_access_context_manager_service_perimeter_resource                     | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  925 | CKV2_GCP_3    | resource                         | google_healthcare_dataset                                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  926 | CKV2_GCP_3    | resource                         | google_compute_target_ssl_proxy                                              | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  927 | CKV2_GCP_3    | resource                         | google_compute_disk                                                          | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  928 | CKV2_GCP_3    | resource                         | google_healthcare_dicom_store_iam                                            | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  744 | CKV2_GCP_3    | resource                         | google_iap_web_iam                                                           | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  745 | CKV2_GCP_3    | resource                         | google_billing_account_iam_policy                                            | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  746 | CKV2_GCP_3    | resource                         | google_redis_instance                                                        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  747 | CKV2_GCP_3    | resource                         | google_app_engine_flexible_app_version                                       | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  748 | CKV2_GCP_3    | resource                         | google_container_registry                                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  749 | CKV2_GCP_3    | resource                         | google_cloud_asset_project_feed                                              | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  750 | CKV2_GCP_3    | resource                         | google_storage_bucket_access_control                                         | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  751 | CKV2_GCP_3    | resource                         | google_monitoring_dashboard                                                  | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  752 | CKV2_GCP_3    | resource                         | google_filestore_instance                                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  753 | CKV2_GCP_3    | resource                         | google_access_context_manager_service_perimeter_resource                     | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  754 | CKV2_GCP_3    | resource                         | google_compute_instance_template                                             | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  755 | CKV2_GCP_3    | resource                         | google_iap_app_engine_version_iam                                            | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  756 | CKV2_GCP_3    | resource                         | google_compute_region_health_check                                           | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  757 | CKV2_GCP_3    | resource                         | google_compute_region_backend_service                                        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  758 | CKV2_GCP_3    | resource                         | google_storage_object_access_control                                         | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  759 | CKV2_GCP_3    | resource                         | google_secret_manager_secret_version                                         | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  760 | CKV2_GCP_3    | resource                         | google_logging_billing_account_sink                                          | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  761 | CKV2_GCP_3    | resource                         | google_monitoring_slo                                                        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  762 | CKV2_GCP_3    | resource                         | google_compute_attached_disk                                                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  763 | CKV2_GCP_3    | resource                         | google_storage_bucket_object                                                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  764 | CKV2_GCP_3    | resource                         | google_compute_region_target_http_proxy                                      | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  765 | CKV2_GCP_3    | resource                         | google_iap_app_engine_service_iam                                            | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  766 | CKV2_GCP_3    | resource                         | google_healthcare_dataset                                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  767 | CKV2_GCP_3    | resource                         | google_sql_database_instance                                                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  768 | CKV2_GCP_3    | resource                         | google_datastore_index                                                       | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  769 | CKV2_GCP_3    | resource                         | google_bigtable_instance_iam                                                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  770 | CKV2_GCP_3    | resource                         | google_logging_billing_account_exclusion                                     | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  771 | CKV2_GCP_3    | resource                         | google_sql_source_representation_instance                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  772 | CKV2_GCP_3    | resource                         | google_data_catalog_entry                                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  773 | CKV2_GCP_3    | resource                         | google_compute_instance_from_template                                        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  774 | CKV2_GCP_3    | resource                         | google_logging_folder_exclusion                                              | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  775 | CKV2_GCP_3    | resource                         | google_compute_autoscaler                                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  776 | CKV2_GCP_3    | resource                         | google_bigtable_table                                                        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  777 | CKV2_GCP_3    | resource                         | google_organization_iam_policy                                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  778 | CKV2_GCP_3    | resource                         | google_data_catalog_entry_group_iam                                          | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  779 | CKV2_GCP_3    | resource                         | google_usage_export_bucket                                                   | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  780 | CKV2_GCP_3    | resource                         | google_monitoring_alert_policy                                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  781 | CKV2_GCP_3    | resource                         | google_compute_instance_group_named_port                                     | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  782 | CKV2_GCP_3    | resource                         | google_monitoring_service                                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  783 | CKV2_GCP_3    | resource                         | google_storage_default_object_acl                                            | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  784 | CKV2_GCP_3    | resource                         | google_os_login_ssh_public_key                                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  785 | CKV2_GCP_3    | resource                         | google_app_engine_application_url_dispatch_rules                             | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  786 | CKV2_GCP_3    | resource                         | google_container_node_pool                                                   | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  787 | CKV2_GCP_3    | resource                         | google_monitoring_notification_channel                                       | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  788 | CKV2_GCP_3    | resource                         | google_project_iam_member                                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  789 | CKV2_GCP_3    | resource                         | google_healthcare_dicom_store_iam                                            | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  790 | CKV2_GCP_3    | resource                         | google_dataproc_cluster                                                      | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  791 | CKV2_GCP_3    | resource                         | google_compute_target_https_proxy                                            | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  792 | CKV2_GCP_3    | resource                         | google_access_context_manager_access_policy                                  | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  793 | CKV2_GCP_3    | resource                         | google_compute_region_instance_group_manager                                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  794 | CKV2_GCP_3    | resource                         | google_runtimeconfig_variable                                                | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  795 | CKV2_GCP_3    | resource                         | google_pubsub_topic_iam                                                      | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  796 | CKV2_GCP_3    | resource                         | google_organization_policy                                                   | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  797 | CKV2_GCP_3    | resource                         | google_service_account                                                       | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  798 | CKV2_GCP_3    | resource                         | google_logging_organization_sink                                             | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  799 | CKV2_GCP_3    | resource                         | google_cloud_tasks_queue                                                     | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  800 | CKV2_GCP_3    | resource                         | google_compute_global_forwarding_rule                                        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  801 | CKV2_GCP_3    | resource                         | google_identity_platform_oauth_idp_config                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  802 | CKV2_GCP_3    | resource                         | google_compute_target_pool                                                   | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  803 | CKV2_GCP_3    | resource                         | google_folder                                                                | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  804 | CKV2_GCP_3    | resource                         | google_monitoring_group                                                      | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  805 | CKV2_GCP_3    | resource                         | google_logging_project_exclusion                                             | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  806 | CKV2_GCP_3    | resource                         | google_identity_platform_default_supported_idp_config                        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  807 | CKV2_GCP_3    | resource                         | google_active_directory_domain                                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  808 | CKV2_GCP_3    | resource                         | google_kms_key_ring_import_job                                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  809 | CKV2_GCP_3    | resource                         | google_compute_node_template                                                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  810 | CKV2_GCP_3    | resource                         | google_compute_project_default_network_tier                                  | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  811 | CKV2_GCP_3    | resource                         | google_vpc_access_connector                                                  | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  812 | CKV2_GCP_3    | resource                         | google_iap_web_type_compute_iam                                              | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  813 | CKV2_GCP_3    | resource                         | google_compute_network_peering                                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  814 | CKV2_GCP_3    | resource                         | google_binary_authorization_attestor_iam                                     | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  815 | CKV2_GCP_3    | resource                         | google_billing_account_iam_member                                            | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  816 | CKV2_GCP_3    | resource                         | google_bigquery_dataset_access                                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  817 | CKV2_GCP_3    | resource                         | google_sourcerepo_repository_iam                                             | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  818 | CKV2_GCP_3    | resource                         | google_dialogflow_intent                                                     | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  819 | CKV2_GCP_3    | resource                         | google_logging_billing_account_bucket_config                                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  820 | CKV2_GCP_3    | resource                         | google_monitoring_uptime_check_config                                        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  821 | CKV2_GCP_3    | resource                         | google_logging_project_sink                                                  | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  822 | CKV2_GCP_3    | resource                         | google_iap_web_type_app_engine_iam                                           | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  823 | CKV2_GCP_3    | resource                         | google_spanner_database_iam                                                  | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  824 | CKV2_GCP_3    | resource                         | google_iap_client                                                            | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  825 | CKV2_GCP_3    | resource                         | google_storage_bucket_acl                                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  826 | CKV2_GCP_3    | resource                         | google_compute_router_interface                                              | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  827 | CKV2_GCP_3    | resource                         | google_access_context_manager_access_level                                   | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  828 | CKV2_GCP_3    | resource                         | google_project_organization_policy                                           | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  829 | CKV2_GCP_3    | resource                         | google_compute_route                                                         | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  830 | CKV2_GCP_3    | resource                         | google_spanner_instance                                                      | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  831 | CKV2_GCP_3    | resource                         | google_healthcare_fhir_store                                                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  832 | CKV2_GCP_3    | resource                         | google_compute_shared_vpc_service_project                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  833 | CKV2_GCP_3    | resource                         | google_pubsub_subscription_iam                                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  834 | CKV2_GCP_3    | resource                         | google_compute_project_metadata_item                                         | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  835 | CKV2_GCP_3    | resource                         | google_data_catalog_entry_group                                              | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  836 | CKV2_GCP_3    | resource                         | google_app_engine_application                                                | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  837 | CKV2_GCP_3    | resource                         | google_binary_authorization_policy                                           | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  838 | CKV2_GCP_3    | resource                         | google_sourcerepo_repository                                                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  839 | CKV2_GCP_3    | resource                         | google_compute_reservation                                                   | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  840 | CKV2_GCP_3    | resource                         | google_compute_forwarding_rule                                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  841 | CKV2_GCP_3    | resource                         | google_kms_crypto_key                                                        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  842 | CKV2_GCP_3    | resource                         | google_data_catalog_tag                                                      | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  843 | CKV2_GCP_3    | resource                         | google_compute_region_url_map                                                | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  844 | CKV2_GCP_3    | resource                         | google_folder_iam_audit_config                                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  845 | CKV2_GCP_3    | resource                         | google_identity_platform_tenant_oauth_idp_config                             | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  846 | CKV2_GCP_3    | resource                         | google_sql_user                                                              | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  847 | CKV2_GCP_3    | resource                         | google_identity_platform_inbound_saml_config                                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  848 | CKV2_GCP_3    | resource                         | google_storage_bucket                                                        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  849 | CKV2_GCP_3    | resource                         | google_identity_platform_tenant_default_supported_idp_config                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  850 | CKV2_GCP_3    | resource                         | google_compute_target_instance                                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  851 | CKV2_GCP_3    | resource                         | google_composer_environment                                                  | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  852 | CKV2_GCP_3    | resource                         | google_bigquery_dataset                                                      | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  853 | CKV2_GCP_3    | resource                         | google_access_context_manager_service_perimeter                              | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  854 | CKV2_GCP_3    | resource                         | google_dns_policy                                                            | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  855 | CKV2_GCP_3    | resource                         | google_compute_security_policy                                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  856 | CKV2_GCP_3    | resource                         | google_compute_url_map                                                       | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  857 | CKV2_GCP_3    | resource                         | google_dataflow_flex_template_job                                            | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  858 | CKV2_GCP_3    | resource                         | google_app_engine_standard_app_version                                       | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  859 | CKV2_GCP_3    | resource                         | google_bigquery_table                                                        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  860 | CKV2_GCP_3    | resource                         | google_logging_folder_bucket_config                                          | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  861 | CKV2_GCP_3    | resource                         | google_cloudiot_device_registry                                              | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  862 | CKV2_GCP_3    | resource                         | google_compute_router                                                        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  863 | CKV2_GCP_3    | resource                         | google_compute_target_tcp_proxy                                              | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  864 | CKV2_GCP_3    | resource                         | google_dialogflow_entity_type                                                | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  865 | CKV2_GCP_3    | resource                         | google_logging_organization_exclusion                                        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  866 | CKV2_GCP_3    | resource                         | google_bigtable_app_profile                                                  | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  867 | CKV2_GCP_3    | resource                         | google_kms_key_ring_iam                                                      | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  868 | CKV2_GCP_3    | resource                         | google_cloud_run_domain_mapping                                              | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  869 | CKV2_GCP_3    | resource                         | google_tpu_node                                                              | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  870 | CKV2_GCP_3    | resource                         | google_compute_instance_group                                                | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  871 | CKV2_GCP_3    | resource                         | google_compute_region_disk                                                   | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  872 | CKV2_GCP_3    | resource                         | google_storage_bucket_iam_member                                             | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  873 | CKV2_GCP_3    | resource                         | google_cloudbuild_trigger                                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  874 | CKV2_GCP_3    | resource                         | google_binary_authorization_attestor                                         | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  875 | CKV2_GCP_3    | resource                         | google_os_config_patch_deployment                                            | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  876 | CKV2_GCP_3    | resource                         | google_healthcare_dicom_store                                                | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  877 | CKV2_GCP_3    | resource                         | google_dataproc_job                                                          | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  878 | CKV2_GCP_3    | resource                         | google_service_account_key                                                   | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  879 | CKV2_GCP_3    | resource                         | google_compute_firewall                                                      | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  880 | CKV2_GCP_3    | resource                         | google_cloud_scheduler_job                                                   | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  881 | CKV2_GCP_3    | resource                         | google_compute_target_http_proxy                                             | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  882 | CKV2_GCP_3    | resource                         | google_compute_disk_resource_policy_attachment                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  883 | CKV2_GCP_3    | resource                         | google_compute_global_network_endpoint                                       | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  884 | CKV2_GCP_3    | resource                         | google_compute_https_health_check                                            | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  885 | CKV2_GCP_3    | resource                         | google_compute_vpn_gateway                                                   | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  886 | CKV2_GCP_3    | resource                         | google_bigtable_instance                                                     | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  887 | CKV2_GCP_3    | resource                         | google_storage_transfer_job                                                  | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  888 | CKV2_GCP_3    | resource                         | google_firestore_index                                                       | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  889 | CKV2_GCP_3    | resource                         | google_compute_ssl_certificate                                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  890 | CKV2_GCP_3    | resource                         | google_pubsub_topic                                                          | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  891 | CKV2_GCP_3    | resource                         | google_folder_organization_policy                                            | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  892 | CKV2_GCP_3    | resource                         | google_compute_region_autoscaler                                             | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  893 | CKV2_GCP_3    | resource                         | google_ml_engine_model                                                       | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  894 | CKV2_GCP_3    | resource                         | google_organization_iam_audit_config                                         | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  895 | CKV2_GCP_3    | resource                         | google_endpoints_service_iam                                                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  896 | CKV2_GCP_3    | resource                         | google_folder_iam_binding                                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  897 | CKV2_GCP_3    | resource                         | google_folder_iam_policy                                                     | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  898 | CKV2_GCP_3    | resource                         | google_organization_iam_binding                                              | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  899 | CKV2_GCP_3    | resource                         | google_compute_backend_service_signed_url_key                                | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  900 | CKV2_GCP_3    | resource                         | google_sql_database                                                          | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  901 | CKV2_GCP_3    | resource                         | google_healthcare_fhir_store_iam                                             | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  902 | CKV2_GCP_3    | resource                         | google_compute_backend_bucket                                                | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  903 | CKV2_GCP_3    | resource                         | google_compute_interconnect_attachment                                       | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  904 | CKV2_GCP_3    | resource                         | google_monitoring_metric_descriptor                                          | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  905 | CKV2_GCP_3    | resource                         | google_compute_shared_vpc_host_project                                       | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  906 | CKV2_GCP_3    | resource                         | google_identity_platform_tenant_inbound_saml_config                          | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  907 | CKV2_GCP_3    | resource                         | google_compute_backend_service                                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  908 | CKV2_GCP_3    | resource                         | google_compute_project_metadata                                              | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  909 | CKV2_GCP_3    | resource                         | google_compute_subnetwork                                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  910 | CKV2_GCP_3    | resource                         | google_compute_subnetwork_iam                                                | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  911 | CKV2_GCP_3    | resource                         | google_bigquery_dataset_iam                                                  | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  912 | CKV2_GCP_3    | resource                         | google_secret_manager_secret                                                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  913 | CKV2_GCP_3    | resource                         | google_scc_source                                                            | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  914 | CKV2_GCP_3    | resource                         | google_storage_bucket_iam_binding                                            | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  915 | CKV2_GCP_3    | resource                         | google_endpoints_service                                                     | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  916 | CKV2_GCP_3    | resource                         | google_compute_ssl_policy                                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  917 | CKV2_GCP_3    | resource                         | google_service_networking_connection                                         | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  918 | CKV2_GCP_3    | resource                         | google_compute_backend_bucket_signed_url_key                                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  919 | CKV2_GCP_3    | resource                         | google_organization_iam_custom_role                                          | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  920 | CKV2_GCP_3    | resource                         | google_kms_key_ring                                                          | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  921 | CKV2_GCP_3    | resource                         | google_compute_disk                                                          | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  922 | CKV2_GCP_3    | resource                         | google_container_cluster                                                     | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  923 | CKV2_GCP_3    | resource                         | google_project_service                                                       | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  924 | CKV2_GCP_3    | resource                         | google_healthcare_hl7_v2_store_iam                                           | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  925 | CKV2_GCP_3    | resource                         | google_billing_account_iam_binding                                           | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  926 | CKV2_GCP_3    | resource                         | google_compute_instance_iam                                                  | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  927 | CKV2_GCP_3    | resource                         | google_dns_record_set                                                        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  928 | CKV2_GCP_3    | resource                         | google_compute_node_group                                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
 |  929 | CKV2_GCP_3    | resource                         | google_dataproc_job_iam                                                      | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  930 | CKV2_GCP_3    | resource                         | google_usage_export_bucket                                                   | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  931 | CKV2_GCP_3    | resource                         | google_compute_network_endpoint                                              | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  932 | CKV2_GCP_3    | resource                         | google_compute_network_peering                                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  933 | CKV2_GCP_3    | resource                         | google_compute_instance_template                                             | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  934 | CKV2_GCP_3    | resource                         | google_data_catalog_entry_group_iam                                          | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  935 | CKV2_GCP_3    | resource                         | google_data_catalog_entry                                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  936 | CKV2_GCP_3    | resource                         | google_compute_target_pool                                                   | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  937 | CKV2_GCP_3    | resource                         | google_logging_billing_account_sink                                          | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  938 | CKV2_GCP_3    | resource                         | google_compute_backend_service_signed_url_key                                | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  939 | CKV2_GCP_3    | resource                         | google_dataproc_cluster                                                      | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  940 | CKV2_GCP_3    | resource                         | google_secret_manager_secret                                                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  941 | CKV2_GCP_3    | resource                         | google_compute_forwarding_rule                                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  942 | CKV2_GCP_3    | resource                         | google_compute_region_disk                                                   | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  943 | CKV2_GCP_3    | resource                         | google_monitoring_metric_descriptor                                          | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  944 | CKV2_GCP_3    | resource                         | google_storage_bucket_iam_member                                             | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  945 | CKV2_GCP_3    | resource                         | google_compute_instance_group                                                | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  946 | CKV2_GCP_3    | resource                         | google_container_node_pool                                                   | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  947 | CKV2_GCP_3    | resource                         | google_kms_key_ring                                                          | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  948 | CKV2_GCP_3    | resource                         | google_endpoints_service_iam                                                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  949 | CKV2_GCP_3    | resource                         | google_kms_key_ring_iam                                                      | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  950 | CKV2_GCP_3    | resource                         | google_iap_client                                                            | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  951 | CKV2_GCP_3    | resource                         | google_storage_object_access_control                                         | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  952 | CKV2_GCP_3    | resource                         | google_organization_iam_audit_config                                         | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  953 | CKV2_GCP_3    | resource                         | google_compute_target_tcp_proxy                                              | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  954 | CKV2_GCP_3    | resource                         | google_os_config_patch_deployment                                            | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  955 | CKV2_GCP_3    | resource                         | google_identity_platform_tenant                                              | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  956 | CKV2_GCP_3    | resource                         | google_compute_disk_resource_policy_attachment                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  957 | CKV2_GCP_3    | resource                         | google_compute_ssl_policy                                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  958 | CKV2_GCP_3    | resource                         | google_compute_backend_bucket_signed_url_key                                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  959 | CKV2_GCP_3    | resource                         | google_dns_managed_zone                                                      | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  960 | CKV2_GCP_3    | resource                         | google_filestore_instance                                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
-|  961 | CKV2_GCP_4    | resource                         | google_storage_bucket                                                        | Ensure that retention policies on log buckets are configured using Bucket Lock                                                                                                                           | Terraform                        |
-|  962 | CKV2_GCP_4    | resource                         | google_logging_organization_sink                                             | Ensure that retention policies on log buckets are configured using Bucket Lock                                                                                                                           | Terraform                        |
-|  963 | CKV2_GCP_4    | resource                         | google_logging_project_sink                                                  | Ensure that retention policies on log buckets are configured using Bucket Lock                                                                                                                           | Terraform                        |
-|  964 | CKV2_GCP_4    | resource                         | google_logging_folder_sink                                                   | Ensure that retention policies on log buckets are configured using Bucket Lock                                                                                                                           | Terraform                        |
-|  965 | CKV2_GCP_5    | resource                         | google_project_iam_audit_config                                              | Ensure that Cloud Audit Logging is configured properly across all services and all users from a project                                                                                                  | Terraform                        |
-|  966 | CKV2_GCP_5    | resource                         | google_project                                                               | Ensure that Cloud Audit Logging is configured properly across all services and all users from a project                                                                                                  | Terraform                        |
-|  967 | CKV2_GCP_6    | resource                         | google_kms_crypto_key_iam_binding                                            | Ensure that Cloud KMS cryptokeys are not anonymously or publicly accessible                                                                                                                              | Terraform                        |
-|  968 | CKV2_GCP_6    | resource                         | google_kms_crypto_key                                                        | Ensure that Cloud KMS cryptokeys are not anonymously or publicly accessible                                                                                                                              | Terraform                        |
-|  969 | CKV2_GCP_6    | resource                         | google_kms_crypto_key_iam_member                                             | Ensure that Cloud KMS cryptokeys are not anonymously or publicly accessible                                                                                                                              | Terraform                        |
-|  970 | CKV2_GCP_7    | resource                         | google_sql_database_instance                                                 | Ensure that a MySQL database instance does not allow anyone to connect with administrative privileges                                                                                                    | Terraform                        |
-|  971 | CKV2_GCP_7    | resource                         | google_sql_user                                                              | Ensure that a MySQL database instance does not allow anyone to connect with administrative privileges                                                                                                    | Terraform                        |
+|  930 | CKV2_GCP_3    | resource                         | google_storage_object_acl                                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  931 | CKV2_GCP_3    | resource                         | google_bigtable_gc_policy                                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  932 | CKV2_GCP_3    | resource                         | google_compute_address                                                       | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  933 | CKV2_GCP_3    | resource                         | google_dns_managed_zone                                                      | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  934 | CKV2_GCP_3    | resource                         | google_compute_snapshot                                                      | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  935 | CKV2_GCP_3    | resource                         | google_iap_web_backend_service_iam                                           | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  936 | CKV2_GCP_3    | resource                         | google_compute_router_bgp_peer                                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  937 | CKV2_GCP_3    | resource                         | google_runtimeconfig_config_iam                                              | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  938 | CKV2_GCP_3    | resource                         | google_compute_instance                                                      | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  939 | CKV2_GCP_3    | resource                         | google_compute_target_ssl_proxy                                              | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  940 | CKV2_GCP_3    | resource                         | google_iap_brand                                                             | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  941 | CKV2_GCP_3    | resource                         | google_app_engine_service_split_traffic                                      | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  942 | CKV2_GCP_3    | resource                         | google_compute_network_endpoint_group                                        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  943 | CKV2_GCP_3    | resource                         | google_compute_resource_policy                                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  944 | CKV2_GCP_3    | resource                         | google_app_engine_firewall_rule                                              | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  945 | CKV2_GCP_3    | resource                         | google_kms_crypto_key_iam                                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  946 | CKV2_GCP_3    | resource                         | google_spanner_database                                                      | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  947 | CKV2_GCP_3    | resource                         | google_dataproc_autoscaling_policy                                           | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  948 | CKV2_GCP_3    | resource                         | google_runtimeconfig_config                                                  | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  949 | CKV2_GCP_3    | resource                         | google_dialogflow_agent                                                      | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  950 | CKV2_GCP_3    | resource                         | google_compute_region_target_https_proxy                                     | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  951 | CKV2_GCP_3    | resource                         | google_cloudiot_device                                                       | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  952 | CKV2_GCP_3    | resource                         | google_bigquery_job                                                          | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  953 | CKV2_GCP_3    | resource                         | google_compute_global_address                                                | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  954 | CKV2_GCP_3    | resource                         | google_cloudfunctions_function                                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  955 | CKV2_GCP_3    | resource                         | google_storage_bucket_iam                                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  956 | CKV2_GCP_3    | resource                         | google_project_iam_binding                                                   | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  957 | CKV2_GCP_3    | resource                         | google_compute_http_health_check                                             | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  958 | CKV2_GCP_3    | resource                         | google_compute_region_disk_resource_policy_attachment                        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  959 | CKV2_GCP_3    | resource                         | google_logging_metric                                                        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  960 | CKV2_GCP_3    | resource                         | google_compute_health_check                                                  | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform                        |
+|  961 | CKV2_GCP_4    | resource                         | google_logging_project_sink                                                  | Ensure that retention policies on log buckets are configured using Bucket Lock                                                                                                                           | Terraform                        |
+|  962 | CKV2_GCP_4    | resource                         | google_logging_folder_sink                                                   | Ensure that retention policies on log buckets are configured using Bucket Lock                                                                                                                           | Terraform                        |
+|  963 | CKV2_GCP_4    | resource                         | google_logging_organization_sink                                             | Ensure that retention policies on log buckets are configured using Bucket Lock                                                                                                                           | Terraform                        |
+|  964 | CKV2_GCP_4    | resource                         | google_storage_bucket                                                        | Ensure that retention policies on log buckets are configured using Bucket Lock                                                                                                                           | Terraform                        |
+|  965 | CKV2_GCP_5    | resource                         | google_project                                                               | Ensure that Cloud Audit Logging is configured properly across all services and all users from a project                                                                                                  | Terraform                        |
+|  966 | CKV2_GCP_5    | resource                         | google_project_iam_audit_config                                              | Ensure that Cloud Audit Logging is configured properly across all services and all users from a project                                                                                                  | Terraform                        |
+|  967 | CKV2_GCP_6    | resource                         | google_kms_crypto_key                                                        | Ensure that Cloud KMS cryptokeys are not anonymously or publicly accessible                                                                                                                              | Terraform                        |
+|  968 | CKV2_GCP_6    | resource                         | google_kms_crypto_key_iam_member                                             | Ensure that Cloud KMS cryptokeys are not anonymously or publicly accessible                                                                                                                              | Terraform                        |
+|  969 | CKV2_GCP_6    | resource                         | google_kms_crypto_key_iam_binding                                            | Ensure that Cloud KMS cryptokeys are not anonymously or publicly accessible                                                                                                                              | Terraform                        |
+|  970 | CKV2_GCP_7    | resource                         | google_sql_user                                                              | Ensure that a MySQL database instance does not allow anyone to connect with administrative privileges                                                                                                    | Terraform                        |
+|  971 | CKV2_GCP_7    | resource                         | google_sql_database_instance                                                 | Ensure that a MySQL database instance does not allow anyone to connect with administrative privileges                                                                                                    | Terraform                        |
 |  972 | CKV_GIT_1     | resource                         | github_repository                                                            | Ensure Repository is Private                                                                                                                                                                             | Terraform                        |
 |  973 | CKV_K8S_1     | resource                         | PodSecurityPolicy                                                            | Do not admit containers wishing to share the host process ID namespace                                                                                                                                   | Kubernetes                       |
 |  974 | CKV_K8S_2     | resource                         | PodSecurityPolicy                                                            | Do not admit privileged containers                                                                                                                                                                       | Kubernetes                       |
diff --git a/docs/5.Policy Index/terraform.md b/docs/5.Policy Index/terraform.md
index 292c1d426..8419501fe 100644
--- a/docs/5.Policy Index/terraform.md
+++ b/docs/5.Policy Index/terraform.md
@@ -206,8 +206,8 @@ nav_order: 1
 | 195 | CKV2_AWS_1    | resource | aws_network_acl                                              | Ensure that all NACL are attached to subnets                                                                                                                                                             | Terraform |
 | 196 | CKV2_AWS_2    | resource | aws_volume_attachment                                        | Ensure that only encrypted EBS volumes are attached to EC2 instances                                                                                                                                     | Terraform |
 | 197 | CKV2_AWS_2    | resource | aws_ebs_volume                                               | Ensure that only encrypted EBS volumes are attached to EC2 instances                                                                                                                                     | Terraform |
-| 198 | CKV2_AWS_3    | resource | aws_guardduty_organization_configuration                     | Ensure GuardDuty is enabled to specific org/region                                                                                                                                                       | Terraform |
-| 199 | CKV2_AWS_3    | resource | aws_guardduty_detector                                       | Ensure GuardDuty is enabled to specific org/region                                                                                                                                                       | Terraform |
+| 198 | CKV2_AWS_3    | resource | aws_guardduty_detector                                       | Ensure GuardDuty is enabled to specific org/region                                                                                                                                                       | Terraform |
+| 199 | CKV2_AWS_3    | resource | aws_guardduty_organization_configuration                     | Ensure GuardDuty is enabled to specific org/region                                                                                                                                                       | Terraform |
 | 200 | CKV2_AWS_4    | resource | aws_api_gateway_stage                                        | Ensure API Gateway stage have logging level defined as appropriate                                                                                                                                       | Terraform |
 | 201 | CKV2_AWS_4    | resource | aws_api_gateway_method_settings                              | Ensure API Gateway stage have logging level defined as appropriate                                                                                                                                       | Terraform |
 | 202 | CKV2_AWS_5    | resource | aws_security_group                                           | Ensure that Security Groups are attached to an other resource                                                                                                                                            | Terraform |
@@ -219,28 +219,28 @@ nav_order: 1
 | 208 | CKV2_AWS_9    | resource | aws_backup_selection                                         | Ensure that EBS are added in the backup plans of AWS Backup                                                                                                                                              | Terraform |
 | 209 | CKV2_AWS_10   | resource | aws_cloudtrail                                               | Ensure CloudTrail trails are integrated with CloudWatch Logs                                                                                                                                             | Terraform |
 | 210 | CKV2_AWS_11   | resource | aws_vpc                                                      | Ensure VPC flow logging is enabled in all VPCs                                                                                                                                                           | Terraform |
-| 211 | CKV2_AWS_12   | resource | aws_vpc                                                      | Ensure the default security group of every VPC restricts all traffic                                                                                                                                     | Terraform |
-| 212 | CKV2_AWS_12   | resource | aws_default_security_group                                   | Ensure the default security group of every VPC restricts all traffic                                                                                                                                     | Terraform |
+| 211 | CKV2_AWS_12   | resource | aws_default_security_group                                   | Ensure the default security group of every VPC restricts all traffic                                                                                                                                     | Terraform |
+| 212 | CKV2_AWS_12   | resource | aws_vpc                                                      | Ensure the default security group of every VPC restricts all traffic                                                                                                                                     | Terraform |
 | 213 | CKV2_AWS_13   | resource | aws_redshift_cluster                                         | Ensure that Redshift clusters has backup plan of AWS Backup                                                                                                                                              | Terraform |
 | 214 | CKV2_AWS_14   | resource | aws_iam_group                                                | Ensure that IAM groups includes at least one IAM user                                                                                                                                                    | Terraform |
 | 215 | CKV2_AWS_14   | resource | aws_iam_group_membership                                     | Ensure that IAM groups includes at least one IAM user                                                                                                                                                    | Terraform |
-| 216 | CKV2_AWS_15   | resource | aws_elb                                                      | Ensure that auto Scaling groups that are associated with a load balancer, are using Elastic Load Balancing health checks.                                                                                | Terraform |
-| 217 | CKV2_AWS_15   | resource | aws_autoscaling_group                                        | Ensure that auto Scaling groups that are associated with a load balancer, are using Elastic Load Balancing health checks.                                                                                | Terraform |
+| 216 | CKV2_AWS_15   | resource | aws_autoscaling_group                                        | Ensure that auto Scaling groups that are associated with a load balancer, are using Elastic Load Balancing health checks.                                                                                | Terraform |
+| 217 | CKV2_AWS_15   | resource | aws_elb                                                      | Ensure that auto Scaling groups that are associated with a load balancer, are using Elastic Load Balancing health checks.                                                                                | Terraform |
 | 218 | CKV2_AWS_16   | resource | aws_appautoscaling_target                                    | Ensure that Auto Scaling is enabled on your DynamoDB tables                                                                                                                                              | Terraform |
 | 219 | CKV2_AWS_16   | resource | aws_dynamodb_table                                           | Ensure that Auto Scaling is enabled on your DynamoDB tables                                                                                                                                              | Terraform |
 | 220 | CKV2_AWS_18   | resource | aws_backup_selection                                         | Ensure that Elastic File System (Amazon EFS) file systems are added in the backup plans of AWS Backup                                                                                                    | Terraform |
 | 221 | CKV2_AWS_19   | resource | aws_eip                                                      | Ensure that all EIP addresses allocated to a VPC are attached to EC2 instances                                                                                                                           | Terraform |
 | 222 | CKV2_AWS_19   | resource | aws_eip_association                                          | Ensure that all EIP addresses allocated to a VPC are attached to EC2 instances                                                                                                                           | Terraform |
-| 223 | CKV2_AWS_20   | resource | aws_lb_listener                                              | Ensure that ALB redirects HTTP requests into HTTPS ones                                                                                                                                                  | Terraform |
-| 224 | CKV2_AWS_20   | resource | aws_lb                                                       | Ensure that ALB redirects HTTP requests into HTTPS ones                                                                                                                                                  | Terraform |
+| 223 | CKV2_AWS_20   | resource | aws_lb                                                       | Ensure that ALB redirects HTTP requests into HTTPS ones                                                                                                                                                  | Terraform |
+| 224 | CKV2_AWS_20   | resource | aws_lb_listener                                              | Ensure that ALB redirects HTTP requests into HTTPS ones                                                                                                                                                  | Terraform |
 | 225 | CKV2_AWS_21   | resource | aws_iam_group_membership                                     | Ensure that all IAM users are members of at least one IAM group.                                                                                                                                         | Terraform |
 | 226 | CKV2_AWS_22   | resource | aws_iam_user                                                 | Ensure an IAM User does not have access to the console                                                                                                                                                   | Terraform |
 | 227 | CKV2_AWS_23   | resource | aws_route53_record                                           | Route53 A Record has Attached Resource                                                                                                                                                                   | Terraform |
 | 228 | CKV2_AWS_27   | resource | aws_db_instance                                              | Postgres RDS has Query Logging enabled                                                                                                                                                                   | Terraform |
 | 229 | CKV2_AWS_27   | resource | aws_rds_cluster_parameter_group                              | Postgres RDS has Query Logging enabled                                                                                                                                                                   | Terraform |
 | 230 | CKV2_AWS_28   | resource | aws_lb                                                       | Ensure public facing ALB are protected by WAF                                                                                                                                                            | Terraform |
-| 231 | CKV2_AWS_29   | resource | aws_api_gateway_stage                                        | Ensure public API gateway are protected by WAF                                                                                                                                                           | Terraform |
-| 232 | CKV2_AWS_29   | resource | aws_api_gateway_rest_api                                     | Ensure public API gateway are protected by WAF                                                                                                                                                           | Terraform |
+| 231 | CKV2_AWS_29   | resource | aws_api_gateway_rest_api                                     | Ensure public API gateway are protected by WAF                                                                                                                                                           | Terraform |
+| 232 | CKV2_AWS_29   | resource | aws_api_gateway_stage                                        | Ensure public API gateway are protected by WAF                                                                                                                                                           | Terraform |
 | 233 | CKV_AZURE_1   | resource | azurerm_linux_virtual_machine                                | Ensure Azure Instance does not use basic authentication(Use SSH Key Instead)                                                                                                                             | Terraform |
 | 234 | CKV_AZURE_1   | resource | azurerm_virtual_machine                                      | Ensure Azure Instance does not use basic authentication(Use SSH Key Instead)                                                                                                                             | Terraform |
 | 235 | CKV_AZURE_2   | resource | azurerm_managed_disk                                         | Ensure Azure managed disk has encryption enabled                                                                                                                                                         | Terraform |
@@ -390,45 +390,45 @@ nav_order: 1
 | 379 | CKV_AZURE_131 | resource | azurerm_security_center_contact                              | Ensure that 'Security contact emails' is set                                                                                                                                                             | Terraform |
 | 380 | CKV_AZURE_132 | resource | azurerm_cosmosdb_account                                     | Ensure cosmosdb does not allow privileged escalation by restricting management plane changes                                                                                                             | Terraform |
 | 381 | CKV2_AZURE_1  | resource | azurerm_storage_account                                      | Ensure storage for critical data are encrypted with Customer Managed Key                                                                                                                                 | Terraform |
-| 382 | CKV2_AZURE_2  | resource | azurerm_mssql_server_security_alert_policy                   | Ensure that Vulnerability Assessment (VA) is enabled on a SQL server by setting a Storage Account                                                                                                        | Terraform |
-| 383 | CKV2_AZURE_2  | resource | azurerm_sql_server                                           | Ensure that Vulnerability Assessment (VA) is enabled on a SQL server by setting a Storage Account                                                                                                        | Terraform |
-| 384 | CKV2_AZURE_3  | resource | azurerm_mssql_server_vulnerability_assessment                | Ensure that VA setting Periodic Recurring Scans is enabled on a SQL server                                                                                                                               | Terraform |
+| 382 | CKV2_AZURE_2  | resource | azurerm_sql_server                                           | Ensure that Vulnerability Assessment (VA) is enabled on a SQL server by setting a Storage Account                                                                                                        | Terraform |
+| 383 | CKV2_AZURE_2  | resource | azurerm_mssql_server_security_alert_policy                   | Ensure that Vulnerability Assessment (VA) is enabled on a SQL server by setting a Storage Account                                                                                                        | Terraform |
+| 384 | CKV2_AZURE_3  | resource | azurerm_sql_server                                           | Ensure that VA setting Periodic Recurring Scans is enabled on a SQL server                                                                                                                               | Terraform |
 | 385 | CKV2_AZURE_3  | resource | azurerm_mssql_server                                         | Ensure that VA setting Periodic Recurring Scans is enabled on a SQL server                                                                                                                               | Terraform |
-| 386 | CKV2_AZURE_3  | resource | azurerm_mssql_server_security_alert_policy                   | Ensure that VA setting Periodic Recurring Scans is enabled on a SQL server                                                                                                                               | Terraform |
-| 387 | CKV2_AZURE_3  | resource | azurerm_sql_server                                           | Ensure that VA setting Periodic Recurring Scans is enabled on a SQL server                                                                                                                               | Terraform |
-| 388 | CKV2_AZURE_4  | resource | azurerm_mssql_server_vulnerability_assessment                | Ensure Azure SQL server ADS VA Send scan reports to is configured                                                                                                                                        | Terraform |
+| 386 | CKV2_AZURE_3  | resource | azurerm_mssql_server_vulnerability_assessment                | Ensure that VA setting Periodic Recurring Scans is enabled on a SQL server                                                                                                                               | Terraform |
+| 387 | CKV2_AZURE_3  | resource | azurerm_mssql_server_security_alert_policy                   | Ensure that VA setting Periodic Recurring Scans is enabled on a SQL server                                                                                                                               | Terraform |
+| 388 | CKV2_AZURE_4  | resource | azurerm_sql_server                                           | Ensure Azure SQL server ADS VA Send scan reports to is configured                                                                                                                                        | Terraform |
 | 389 | CKV2_AZURE_4  | resource | azurerm_mssql_server                                         | Ensure Azure SQL server ADS VA Send scan reports to is configured                                                                                                                                        | Terraform |
-| 390 | CKV2_AZURE_4  | resource | azurerm_mssql_server_security_alert_policy                   | Ensure Azure SQL server ADS VA Send scan reports to is configured                                                                                                                                        | Terraform |
-| 391 | CKV2_AZURE_4  | resource | azurerm_sql_server                                           | Ensure Azure SQL server ADS VA Send scan reports to is configured                                                                                                                                        | Terraform |
-| 392 | CKV2_AZURE_5  | resource | azurerm_mssql_server_vulnerability_assessment                | Ensure that VA setting 'Also send email notifications to admins and subscription owners' is set for a SQL server                                                                                         | Terraform |
+| 390 | CKV2_AZURE_4  | resource | azurerm_mssql_server_vulnerability_assessment                | Ensure Azure SQL server ADS VA Send scan reports to is configured                                                                                                                                        | Terraform |
+| 391 | CKV2_AZURE_4  | resource | azurerm_mssql_server_security_alert_policy                   | Ensure Azure SQL server ADS VA Send scan reports to is configured                                                                                                                                        | Terraform |
+| 392 | CKV2_AZURE_5  | resource | azurerm_sql_server                                           | Ensure that VA setting 'Also send email notifications to admins and subscription owners' is set for a SQL server                                                                                         | Terraform |
 | 393 | CKV2_AZURE_5  | resource | azurerm_mssql_server                                         | Ensure that VA setting 'Also send email notifications to admins and subscription owners' is set for a SQL server                                                                                         | Terraform |
-| 394 | CKV2_AZURE_5  | resource | azurerm_mssql_server_security_alert_policy                   | Ensure that VA setting 'Also send email notifications to admins and subscription owners' is set for a SQL server                                                                                         | Terraform |
-| 395 | CKV2_AZURE_5  | resource | azurerm_sql_server                                           | Ensure that VA setting 'Also send email notifications to admins and subscription owners' is set for a SQL server                                                                                         | Terraform |
-| 396 | CKV2_AZURE_6  | resource | azurerm_sql_firewall_rule                                    | Ensure 'Allow access to Azure services' for PostgreSQL Database Server is disabled                                                                                                                       | Terraform |
-| 397 | CKV2_AZURE_6  | resource | azurerm_sql_server                                           | Ensure 'Allow access to Azure services' for PostgreSQL Database Server is disabled                                                                                                                       | Terraform |
+| 394 | CKV2_AZURE_5  | resource | azurerm_mssql_server_vulnerability_assessment                | Ensure that VA setting 'Also send email notifications to admins and subscription owners' is set for a SQL server                                                                                         | Terraform |
+| 395 | CKV2_AZURE_5  | resource | azurerm_mssql_server_security_alert_policy                   | Ensure that VA setting 'Also send email notifications to admins and subscription owners' is set for a SQL server                                                                                         | Terraform |
+| 396 | CKV2_AZURE_6  | resource | azurerm_sql_server                                           | Ensure 'Allow access to Azure services' for PostgreSQL Database Server is disabled                                                                                                                       | Terraform |
+| 397 | CKV2_AZURE_6  | resource | azurerm_sql_firewall_rule                                    | Ensure 'Allow access to Azure services' for PostgreSQL Database Server is disabled                                                                                                                       | Terraform |
 | 398 | CKV2_AZURE_7  | resource | azurerm_sql_server                                           | Ensure that Azure Active Directory Admin is configured                                                                                                                                                   | Terraform |
 | 399 | CKV2_AZURE_8  | resource | azurerm_storage_container                                    | Ensure the storage container storing the activity logs is not publicly accessible                                                                                                                        | Terraform |
 | 400 | CKV2_AZURE_8  | resource | azurerm_monitor_activity_log_alert                           | Ensure the storage container storing the activity logs is not publicly accessible                                                                                                                        | Terraform |
 | 401 | CKV2_AZURE_9  | resource | azurerm_virtual_machine                                      | Ensure Virtual Machines are utilizing Managed Disks                                                                                                                                                      | Terraform |
-| 402 | CKV2_AZURE_10 | resource | azurerm_virtual_machine                                      | Ensure that Microsoft Antimalware is configured to automatically updates for Virtual Machines                                                                                                            | Terraform |
-| 403 | CKV2_AZURE_10 | resource | azurerm_virtual_machine_extension                            | Ensure that Microsoft Antimalware is configured to automatically updates for Virtual Machines                                                                                                            | Terraform |
+| 402 | CKV2_AZURE_10 | resource | azurerm_virtual_machine_extension                            | Ensure that Microsoft Antimalware is configured to automatically updates for Virtual Machines                                                                                                            | Terraform |
+| 403 | CKV2_AZURE_10 | resource | azurerm_virtual_machine                                      | Ensure that Microsoft Antimalware is configured to automatically updates for Virtual Machines                                                                                                            | Terraform |
 | 404 | CKV2_AZURE_11 | resource | azurerm_kusto_cluster                                        | Ensure that Azure Data Explorer encryption at rest uses a customer-managed key                                                                                                                           | Terraform |
 | 405 | CKV2_AZURE_12 | resource | azurerm_virtual_machine                                      | Ensure that virtual machines are backed up using Azure Backup                                                                                                                                            | Terraform |
-| 406 | CKV2_AZURE_13 | resource | azurerm_mssql_server_security_alert_policy                   | Ensure that sql servers enables data security policy                                                                                                                                                     | Terraform |
-| 407 | CKV2_AZURE_13 | resource | azurerm_sql_server                                           | Ensure that sql servers enables data security policy                                                                                                                                                     | Terraform |
-| 408 | CKV2_AZURE_14 | resource | azurerm_virtual_machine                                      | Ensure that Unattached disks are encrypted                                                                                                                                                               | Terraform |
-| 409 | CKV2_AZURE_14 | resource | azurerm_managed_disk                                         | Ensure that Unattached disks are encrypted                                                                                                                                                               | Terraform |
+| 406 | CKV2_AZURE_13 | resource | azurerm_sql_server                                           | Ensure that sql servers enables data security policy                                                                                                                                                     | Terraform |
+| 407 | CKV2_AZURE_13 | resource | azurerm_mssql_server_security_alert_policy                   | Ensure that sql servers enables data security policy                                                                                                                                                     | Terraform |
+| 408 | CKV2_AZURE_14 | resource | azurerm_managed_disk                                         | Ensure that Unattached disks are encrypted                                                                                                                                                               | Terraform |
+| 409 | CKV2_AZURE_14 | resource | azurerm_virtual_machine                                      | Ensure that Unattached disks are encrypted                                                                                                                                                               | Terraform |
 | 410 | CKV2_AZURE_15 | resource | azurerm_data_factory                                         | Ensure that Azure data factories are encrypted with a customer-managed key                                                                                                                               | Terraform |
-| 411 | CKV2_AZURE_16 | resource | azurerm_mysql_server_key                                     | Ensure that MySQL server enables customer-managed key for encryption                                                                                                                                     | Terraform |
-| 412 | CKV2_AZURE_16 | resource | azurerm_mysql_server                                         | Ensure that MySQL server enables customer-managed key for encryption                                                                                                                                     | Terraform |
-| 413 | CKV2_AZURE_17 | resource | azurerm_postgresql_server                                    | Ensure that PostgreSQL server enables customer-managed key for encryption                                                                                                                                | Terraform |
-| 414 | CKV2_AZURE_17 | resource | azurerm_postgresql_server_key                                | Ensure that PostgreSQL server enables customer-managed key for encryption                                                                                                                                | Terraform |
-| 415 | CKV2_AZURE_18 | resource | azurerm_storage_account                                      | Ensure that Storage Accounts use customer-managed key for encryption                                                                                                                                     | Terraform |
-| 416 | CKV2_AZURE_18 | resource | azurerm_storage_account_customer_managed_key                 | Ensure that Storage Accounts use customer-managed key for encryption                                                                                                                                     | Terraform |
+| 411 | CKV2_AZURE_16 | resource | azurerm_mysql_server                                         | Ensure that MySQL server enables customer-managed key for encryption                                                                                                                                     | Terraform |
+| 412 | CKV2_AZURE_16 | resource | azurerm_mysql_server_key                                     | Ensure that MySQL server enables customer-managed key for encryption                                                                                                                                     | Terraform |
+| 413 | CKV2_AZURE_17 | resource | azurerm_postgresql_server_key                                | Ensure that PostgreSQL server enables customer-managed key for encryption                                                                                                                                | Terraform |
+| 414 | CKV2_AZURE_17 | resource | azurerm_postgresql_server                                    | Ensure that PostgreSQL server enables customer-managed key for encryption                                                                                                                                | Terraform |
+| 415 | CKV2_AZURE_18 | resource | azurerm_storage_account_customer_managed_key                 | Ensure that Storage Accounts use customer-managed key for encryption                                                                                                                                     | Terraform |
+| 416 | CKV2_AZURE_18 | resource | azurerm_storage_account                                      | Ensure that Storage Accounts use customer-managed key for encryption                                                                                                                                     | Terraform |
 | 417 | CKV2_AZURE_19 | resource | azurerm_synapse_workspace                                    | Ensure that Azure Synapse workspaces have no IP firewall rules attached                                                                                                                                  | Terraform |
-| 418 | CKV2_AZURE_20 | resource | azurerm_storage_account                                      | Ensure Storage logging is enabled for Table service for read requests                                                                                                                                    | Terraform |
-| 419 | CKV2_AZURE_20 | resource | azurerm_log_analytics_storage_insights                       | Ensure Storage logging is enabled for Table service for read requests                                                                                                                                    | Terraform |
-| 420 | CKV2_AZURE_20 | resource | azurerm_storage_table                                        | Ensure Storage logging is enabled for Table service for read requests                                                                                                                                    | Terraform |
+| 418 | CKV2_AZURE_20 | resource | azurerm_storage_table                                        | Ensure Storage logging is enabled for Table service for read requests                                                                                                                                    | Terraform |
+| 419 | CKV2_AZURE_20 | resource | azurerm_storage_account                                      | Ensure Storage logging is enabled for Table service for read requests                                                                                                                                    | Terraform |
+| 420 | CKV2_AZURE_20 | resource | azurerm_log_analytics_storage_insights                       | Ensure Storage logging is enabled for Table service for read requests                                                                                                                                    | Terraform |
 | 421 | CKV2_AZURE_21 | resource | azurerm_storage_account                                      | Ensure Storage logging is enabled for Blob service for read requests                                                                                                                                     | Terraform |
 | 422 | CKV2_AZURE_21 | resource | azurerm_storage_container                                    | Ensure Storage logging is enabled for Blob service for read requests                                                                                                                                     | Terraform |
 | 423 | CKV2_AZURE_21 | resource | azurerm_log_analytics_storage_insights                       | Ensure Storage logging is enabled for Blob service for read requests                                                                                                                                     | Terraform |
@@ -518,275 +518,275 @@ nav_order: 1
 | 507 | CKV2_GCP_1    | resource | google_project_default_service_accounts                      | Ensure GKE clusters are not running using the Compute Engine default service account                                                                                                                     | Terraform |
 | 508 | CKV2_GCP_2    | resource | google_compute_network                                       | Ensure legacy networks do not exist for a project                                                                                                                                                        | Terraform |
 | 509 | CKV2_GCP_3    | resource | google_cloud_asset_project_feed                              | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 510 | CKV2_GCP_3    | resource | google_healthcare_dicom_store_iam                            | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 511 | CKV2_GCP_3    | resource | google_compute_project_metadata_item                         | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 512 | CKV2_GCP_3    | resource | google_bigtable_gc_policy                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 513 | CKV2_GCP_3    | resource | google_data_catalog_entry_group_iam                          | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 514 | CKV2_GCP_3    | resource | google_tpu_node                                              | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 515 | CKV2_GCP_3    | resource | google_binary_authorization_policy                           | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 516 | CKV2_GCP_3    | resource | google_storage_bucket_acl                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 517 | CKV2_GCP_3    | resource | google_bigtable_table                                        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 518 | CKV2_GCP_3    | resource | google_logging_billing_account_sink                          | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 519 | CKV2_GCP_3    | resource | google_usage_export_bucket                                   | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 520 | CKV2_GCP_3    | resource | google_app_engine_application                                | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 521 | CKV2_GCP_3    | resource | google_logging_project_sink                                  | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 522 | CKV2_GCP_3    | resource | google_storage_default_object_access_control                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 523 | CKV2_GCP_3    | resource | google_dataflow_flex_template_job                            | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 524 | CKV2_GCP_3    | resource | google_monitoring_service                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 525 | CKV2_GCP_3    | resource | google_compute_router_nat                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 526 | CKV2_GCP_3    | resource | google_organization_policy                                   | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 527 | CKV2_GCP_3    | resource | google_runtimeconfig_config_iam                              | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 528 | CKV2_GCP_3    | resource | google_bigquery_data_transfer_config                         | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 529 | CKV2_GCP_3    | resource | google_compute_region_health_check                           | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 530 | CKV2_GCP_3    | resource | google_storage_bucket                                        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 531 | CKV2_GCP_3    | resource | google_monitoring_dashboard                                  | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 532 | CKV2_GCP_3    | resource | google_iap_brand                                             | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 533 | CKV2_GCP_3    | resource | google_storage_notification                                  | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 534 | CKV2_GCP_3    | resource | google_monitoring_notification_channel                       | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 535 | CKV2_GCP_3    | resource | google_compute_router                                        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 536 | CKV2_GCP_3    | resource | google_active_directory_domain                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 537 | CKV2_GCP_3    | resource | google_compute_region_backend_service                        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 538 | CKV2_GCP_3    | resource | google_compute_backend_service                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 539 | CKV2_GCP_3    | resource | google_monitoring_slo                                        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 540 | CKV2_GCP_3    | resource | google_cloudfunctions_cloud_function_iam                     | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 541 | CKV2_GCP_3    | resource | google_dataproc_autoscaling_policy                           | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 542 | CKV2_GCP_3    | resource | google_kms_key_ring                                          | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 543 | CKV2_GCP_3    | resource | google_iap_web_type_app_engine_iam                           | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 544 | CKV2_GCP_3    | resource | google_spanner_database                                      | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 545 | CKV2_GCP_3    | resource | google_folder                                                | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 546 | CKV2_GCP_3    | resource | google_app_engine_service_split_traffic                      | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 547 | CKV2_GCP_3    | resource | google_os_config_patch_deployment                            | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 548 | CKV2_GCP_3    | resource | google_scc_source                                            | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 549 | CKV2_GCP_3    | resource | google_kms_key_ring_iam                                      | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 550 | CKV2_GCP_3    | resource | google_storage_hmac_key                                      | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 551 | CKV2_GCP_3    | resource | google_deployment_manager_deployment                         | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 552 | CKV2_GCP_3    | resource | google_sql_source_representation_instance                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 553 | CKV2_GCP_3    | resource | google_kms_crypto_key                                        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 554 | CKV2_GCP_3    | resource | google_compute_region_autoscaler                             | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 510 | CKV2_GCP_3    | resource | google_compute_shared_vpc_host_project                       | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 511 | CKV2_GCP_3    | resource | google_dataproc_job_iam                                      | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 512 | CKV2_GCP_3    | resource | google_monitoring_dashboard                                  | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 513 | CKV2_GCP_3    | resource | google_deployment_manager_deployment                         | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 514 | CKV2_GCP_3    | resource | google_sql_database                                          | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 515 | CKV2_GCP_3    | resource | google_project_iam_member                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 516 | CKV2_GCP_3    | resource | google_bigquery_job                                          | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 517 | CKV2_GCP_3    | resource | google_dataflow_job                                          | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 518 | CKV2_GCP_3    | resource | google_project                                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 519 | CKV2_GCP_3    | resource | google_compute_forwarding_rule                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 520 | CKV2_GCP_3    | resource | google_folder_organization_policy                            | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 521 | CKV2_GCP_3    | resource | google_sourcerepo_repository                                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 522 | CKV2_GCP_3    | resource | google_compute_target_instance                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 523 | CKV2_GCP_3    | resource | google_service_account_key                                   | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 524 | CKV2_GCP_3    | resource | google_sourcerepo_repository_iam                             | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 525 | CKV2_GCP_3    | resource | google_healthcare_fhir_store                                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 526 | CKV2_GCP_3    | resource | google_kms_key_ring_import_job                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 527 | CKV2_GCP_3    | resource | google_storage_notification                                  | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 528 | CKV2_GCP_3    | resource | google_compute_vpn_gateway                                   | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 529 | CKV2_GCP_3    | resource | google_healthcare_hl7_v2_store                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 530 | CKV2_GCP_3    | resource | google_compute_global_address                                | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 531 | CKV2_GCP_3    | resource | google_app_engine_standard_app_version                       | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 532 | CKV2_GCP_3    | resource | google_logging_organization_bucket_config                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 533 | CKV2_GCP_3    | resource | google_compute_reservation                                   | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 534 | CKV2_GCP_3    | resource | google_firestore_index                                       | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 535 | CKV2_GCP_3    | resource | google_cloudiot_device_registry                              | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 536 | CKV2_GCP_3    | resource | google_storage_object_acl                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 537 | CKV2_GCP_3    | resource | google_compute_instance_group_named_port                     | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 538 | CKV2_GCP_3    | resource | google_app_engine_service_split_traffic                      | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 539 | CKV2_GCP_3    | resource | google_storage_bucket_access_control                         | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 540 | CKV2_GCP_3    | resource | google_container_registry                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 541 | CKV2_GCP_3    | resource | google_compute_https_health_check                            | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 542 | CKV2_GCP_3    | resource | google_scc_source                                            | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 543 | CKV2_GCP_3    | resource | google_kms_crypto_key_iam                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 544 | CKV2_GCP_3    | resource | google_vpc_access_connector                                  | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 545 | CKV2_GCP_3    | resource | google_compute_router                                        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 546 | CKV2_GCP_3    | resource | google_bigtable_instance                                     | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 547 | CKV2_GCP_3    | resource | google_logging_billing_account_exclusion                     | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 548 | CKV2_GCP_3    | resource | google_billing_account_iam_binding                           | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 549 | CKV2_GCP_3    | resource | google_compute_health_check                                  | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 550 | CKV2_GCP_3    | resource | google_cloudbuild_trigger                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 551 | CKV2_GCP_3    | resource | google_compute_instance_from_template                        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 552 | CKV2_GCP_3    | resource | google_organization_iam_audit_config                         | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 553 | CKV2_GCP_3    | resource | google_compute_snapshot                                      | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 554 | CKV2_GCP_3    | resource | google_identity_platform_tenant_oauth_idp_config             | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
 | 555 | CKV2_GCP_3    | resource | google_dataproc_cluster_iam                                  | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 556 | CKV2_GCP_3    | resource | google_identity_platform_tenant_inbound_saml_config          | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 557 | CKV2_GCP_3    | resource | google_access_context_manager_access_policy                  | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 558 | CKV2_GCP_3    | resource | google_sql_user                                              | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 559 | CKV2_GCP_3    | resource | google_compute_instance_group_named_port                     | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 560 | CKV2_GCP_3    | resource | google_iap_app_engine_service_iam                            | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 561 | CKV2_GCP_3    | resource | google_bigtable_instance                                     | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 562 | CKV2_GCP_3    | resource | google_monitoring_alert_policy                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 563 | CKV2_GCP_3    | resource | google_container_registry                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 564 | CKV2_GCP_3    | resource | google_network_management_connectivity_test_resource         | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 565 | CKV2_GCP_3    | resource | google_monitoring_metric_descriptor                          | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 566 | CKV2_GCP_3    | resource | google_compute_project_default_network_tier                  | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 567 | CKV2_GCP_3    | resource | google_cloud_tasks_queue                                     | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 568 | CKV2_GCP_3    | resource | google_compute_route                                         | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 569 | CKV2_GCP_3    | resource | google_compute_interconnect_attachment                       | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 570 | CKV2_GCP_3    | resource | google_compute_disk_resource_policy_attachment               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 571 | CKV2_GCP_3    | resource | google_folder_iam_binding                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 572 | CKV2_GCP_3    | resource | google_storage_bucket_iam_member                             | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 573 | CKV2_GCP_3    | resource | google_compute_network_endpoint_group                        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 574 | CKV2_GCP_3    | resource | google_compute_network_endpoint                              | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 575 | CKV2_GCP_3    | resource | google_compute_snapshot                                      | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 576 | CKV2_GCP_3    | resource | google_identity_platform_default_supported_idp_config        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 577 | CKV2_GCP_3    | resource | google_data_catalog_entry_group                              | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 578 | CKV2_GCP_3    | resource | google_project_iam                                           | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 579 | CKV2_GCP_3    | resource | google_dataproc_cluster                                      | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 580 | CKV2_GCP_3    | resource | google_healthcare_hl7_v2_store                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 581 | CKV2_GCP_3    | resource | google_folder_iam_member                                     | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 582 | CKV2_GCP_3    | resource | google_compute_target_instance                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 583 | CKV2_GCP_3    | resource | google_dialogflow_entity_type                                | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 584 | CKV2_GCP_3    | resource | google_compute_network_peering_routes_config                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 585 | CKV2_GCP_3    | resource | google_sourcerepo_repository                                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 586 | CKV2_GCP_3    | resource | google_compute_router_bgp_peer                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 587 | CKV2_GCP_3    | resource | google_compute_router_interface                              | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 588 | CKV2_GCP_3    | resource | google_dialogflow_agent                                      | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 589 | CKV2_GCP_3    | resource | google_binary_authorization_attestor                         | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 590 | CKV2_GCP_3    | resource | google_compute_global_forwarding_rule                        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 591 | CKV2_GCP_3    | resource | google_logging_project_bucket_config                         | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 592 | CKV2_GCP_3    | resource | google_sql_database_instance                                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 593 | CKV2_GCP_3    | resource | google_compute_region_url_map                                | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 594 | CKV2_GCP_3    | resource | google_storage_bucket_object                                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 595 | CKV2_GCP_3    | resource | google_compute_backend_bucket                                | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 556 | CKV2_GCP_3    | resource | google_cloud_tasks_queue                                     | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 557 | CKV2_GCP_3    | resource | google_logging_project_sink                                  | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 558 | CKV2_GCP_3    | resource | google_compute_project_default_network_tier                  | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 559 | CKV2_GCP_3    | resource | google_compute_target_tcp_proxy                              | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 560 | CKV2_GCP_3    | resource | google_monitoring_service                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 561 | CKV2_GCP_3    | resource | google_storage_object_access_control                         | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 562 | CKV2_GCP_3    | resource | google_kms_key_ring                                          | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 563 | CKV2_GCP_3    | resource | google_iap_web_iam                                           | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 564 | CKV2_GCP_3    | resource | google_spanner_database_iam                                  | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 565 | CKV2_GCP_3    | resource | google_storage_bucket_acl                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 566 | CKV2_GCP_3    | resource | google_compute_node_group                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 567 | CKV2_GCP_3    | resource | google_compute_instance_iam                                  | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 568 | CKV2_GCP_3    | resource | google_compute_network_endpoint                              | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 569 | CKV2_GCP_3    | resource | google_organization_iam_member                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 570 | CKV2_GCP_3    | resource | google_cloudfunctions_function                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 571 | CKV2_GCP_3    | resource | google_kms_key_ring_iam                                      | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 572 | CKV2_GCP_3    | resource | google_compute_region_target_https_proxy                     | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 573 | CKV2_GCP_3    | resource | google_iap_app_engine_version_iam                            | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 574 | CKV2_GCP_3    | resource | google_compute_firewall                                      | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 575 | CKV2_GCP_3    | resource | google_compute_region_instance_group_manager                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 576 | CKV2_GCP_3    | resource | google_bigquery_dataset_access                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 577 | CKV2_GCP_3    | resource | google_project_organization_policy                           | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 578 | CKV2_GCP_3    | resource | google_service_account_iam                                   | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 579 | CKV2_GCP_3    | resource | google_compute_global_network_endpoint                       | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 580 | CKV2_GCP_3    | resource | google_compute_route                                         | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 581 | CKV2_GCP_3    | resource | google_compute_instance_group                                | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 582 | CKV2_GCP_3    | resource | google_compute_project_metadata_item                         | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 583 | CKV2_GCP_3    | resource | google_network_management_connectivity_test_resource         | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 584 | CKV2_GCP_3    | resource | google_monitoring_group                                      | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 585 | CKV2_GCP_3    | resource | google_storage_bucket                                        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 586 | CKV2_GCP_3    | resource | google_compute_url_map                                       | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 587 | CKV2_GCP_3    | resource | google_cloud_scheduler_job                                   | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 588 | CKV2_GCP_3    | resource | google_access_context_manager_service_perimeter_resource     | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 589 | CKV2_GCP_3    | resource | google_pubsub_topic                                          | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 590 | CKV2_GCP_3    | resource | google_pubsub_subscription_iam                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 591 | CKV2_GCP_3    | resource | google_binary_authorization_attestor_iam                     | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 592 | CKV2_GCP_3    | resource | google_compute_network_peering_routes_config                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 593 | CKV2_GCP_3    | resource | google_iap_web_type_app_engine_iam                           | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 594 | CKV2_GCP_3    | resource | google_compute_instance_group_manager                        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 595 | CKV2_GCP_3    | resource | google_monitoring_metric_descriptor                          | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
 | 596 | CKV2_GCP_3    | resource | google_os_login_ssh_public_key                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 597 | CKV2_GCP_3    | resource | google_iap_tunnel_instance_iam                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 598 | CKV2_GCP_3    | resource | google_compute_autoscaler                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 599 | CKV2_GCP_3    | resource | google_organization_iam_audit_config                         | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 600 | CKV2_GCP_3    | resource | google_compute_forwarding_rule                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 601 | CKV2_GCP_3    | resource | google_logging_organization_bucket_config                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 602 | CKV2_GCP_3    | resource | google_compute_security_policy                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 603 | CKV2_GCP_3    | resource | google_compute_region_disk_resource_policy_attachment        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 604 | CKV2_GCP_3    | resource | google_storage_transfer_job                                  | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 605 | CKV2_GCP_3    | resource | google_project                                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 606 | CKV2_GCP_3    | resource | google_bigquery_table                                        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 607 | CKV2_GCP_3    | resource | google_dataproc_job                                          | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 608 | CKV2_GCP_3    | resource | google_logging_billing_account_bucket_config                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 609 | CKV2_GCP_3    | resource | google_app_engine_domain_mapping                             | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 610 | CKV2_GCP_3    | resource | google_project_iam_binding                                   | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 611 | CKV2_GCP_3    | resource | google_kms_crypto_key_iam                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 612 | CKV2_GCP_3    | resource | google_firestore_index                                       | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 613 | CKV2_GCP_3    | resource | google_service_networking_connection                         | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 614 | CKV2_GCP_3    | resource | google_monitoring_group                                      | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 615 | CKV2_GCP_3    | resource | google_pubsub_topic                                          | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 616 | CKV2_GCP_3    | resource | google_compute_disk                                          | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 617 | CKV2_GCP_3    | resource | google_logging_metric                                        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 618 | CKV2_GCP_3    | resource | google_compute_global_address                                | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 619 | CKV2_GCP_3    | resource | google_cloud_asset_folder_feed                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 620 | CKV2_GCP_3    | resource | google_identity_platform_tenant                              | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 621 | CKV2_GCP_3    | resource | google_project_organization_policy                           | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 622 | CKV2_GCP_3    | resource | google_billing_account_iam_member                            | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 623 | CKV2_GCP_3    | resource | google_cloud_asset_organization_feed                         | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 624 | CKV2_GCP_3    | resource | google_project_iam_custom_role                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 625 | CKV2_GCP_3    | resource | google_pubsub_topic_iam                                      | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 626 | CKV2_GCP_3    | resource | google_compute_shared_vpc_service_project                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 627 | CKV2_GCP_3    | resource | google_container_analysis_note                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 628 | CKV2_GCP_3    | resource | google_healthcare_dicom_store                                | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 629 | CKV2_GCP_3    | resource | google_bigquery_dataset_access                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 630 | CKV2_GCP_3    | resource | google_binary_authorization_attestor_iam                     | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 631 | CKV2_GCP_3    | resource | google_storage_object_acl                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 632 | CKV2_GCP_3    | resource | google_storage_bucket_iam                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 633 | CKV2_GCP_3    | resource | google_service_account                                       | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 634 | CKV2_GCP_3    | resource | google_healthcare_fhir_store                                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 635 | CKV2_GCP_3    | resource | google_spanner_instance                                      | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 636 | CKV2_GCP_3    | resource | google_compute_instance_group                                | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 637 | CKV2_GCP_3    | resource | google_secret_manager_secret_version                         | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 638 | CKV2_GCP_3    | resource | google_bigquery_job                                          | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 639 | CKV2_GCP_3    | resource | google_compute_resource_policy                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 640 | CKV2_GCP_3    | resource | google_compute_address                                       | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 641 | CKV2_GCP_3    | resource | google_compute_region_target_https_proxy                     | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 642 | CKV2_GCP_3    | resource | google_compute_target_http_proxy                             | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 643 | CKV2_GCP_3    | resource | google_compute_ssl_certificate                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 644 | CKV2_GCP_3    | resource | google_compute_vpn_tunnel                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 645 | CKV2_GCP_3    | resource | google_service_account_key                                   | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 646 | CKV2_GCP_3    | resource | google_compute_reservation                                   | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 647 | CKV2_GCP_3    | resource | google_storage_bucket_access_control                         | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 648 | CKV2_GCP_3    | resource | google_dns_managed_zone                                      | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 649 | CKV2_GCP_3    | resource | google_runtimeconfig_variable                                | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 650 | CKV2_GCP_3    | resource | google_compute_https_health_check                            | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 651 | CKV2_GCP_3    | resource | google_vpc_access_connector                                  | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 652 | CKV2_GCP_3    | resource | google_access_context_manager_access_level                   | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 653 | CKV2_GCP_3    | resource | google_iap_client                                            | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 654 | CKV2_GCP_3    | resource | google_logging_organization_sink                             | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 655 | CKV2_GCP_3    | resource | google_access_context_manager_service_perimeter_resource     | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 656 | CKV2_GCP_3    | resource | google_logging_folder_sink                                   | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 657 | CKV2_GCP_3    | resource | google_compute_network                                       | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 658 | CKV2_GCP_3    | resource | google_identity_platform_tenant_default_supported_idp_config | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 659 | CKV2_GCP_3    | resource | google_compute_region_ssl_certificate                        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 660 | CKV2_GCP_3    | resource | google_logging_folder_bucket_config                          | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 661 | CKV2_GCP_3    | resource | google_app_engine_standard_app_version                       | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 662 | CKV2_GCP_3    | resource | google_endpoints_service_iam                                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 663 | CKV2_GCP_3    | resource | google_cloud_scheduler_job                                   | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 664 | CKV2_GCP_3    | resource | google_compute_instance_iam                                  | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 665 | CKV2_GCP_3    | resource | google_kms_key_ring_import_job                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 666 | CKV2_GCP_3    | resource | google_dataproc_job_iam                                      | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 667 | CKV2_GCP_3    | resource | google_identity_platform_inbound_saml_config                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 668 | CKV2_GCP_3    | resource | google_identity_platform_oauth_idp_config                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 669 | CKV2_GCP_3    | resource | google_filestore_instance                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 670 | CKV2_GCP_3    | resource | google_dataflow_job                                          | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 671 | CKV2_GCP_3    | resource | google_storage_object_access_control                         | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 597 | CKV2_GCP_3    | resource | google_compute_resource_policy                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 598 | CKV2_GCP_3    | resource | google_bigtable_gc_policy                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 599 | CKV2_GCP_3    | resource | google_sql_source_representation_instance                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 600 | CKV2_GCP_3    | resource | google_spanner_database                                      | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 601 | CKV2_GCP_3    | resource | google_filestore_instance                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 602 | CKV2_GCP_3    | resource | google_pubsub_topic_iam                                      | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 603 | CKV2_GCP_3    | resource | google_compute_network_endpoint_group                        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 604 | CKV2_GCP_3    | resource | google_data_catalog_entry_group                              | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 605 | CKV2_GCP_3    | resource | google_pubsub_subscription                                   | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 606 | CKV2_GCP_3    | resource | google_app_engine_domain_mapping                             | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 607 | CKV2_GCP_3    | resource | google_compute_backend_bucket_signed_url_key                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 608 | CKV2_GCP_3    | resource | google_monitoring_alert_policy                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 609 | CKV2_GCP_3    | resource | google_compute_disk                                          | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 610 | CKV2_GCP_3    | resource | google_compute_router_bgp_peer                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 611 | CKV2_GCP_3    | resource | google_storage_bucket_iam_binding                            | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 612 | CKV2_GCP_3    | resource | google_folder_iam_audit_config                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 613 | CKV2_GCP_3    | resource | google_project_iam_binding                                   | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 614 | CKV2_GCP_3    | resource | google_compute_region_target_http_proxy                      | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 615 | CKV2_GCP_3    | resource | google_compute_target_https_proxy                            | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 616 | CKV2_GCP_3    | resource | google_storage_bucket_iam_member                             | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 617 | CKV2_GCP_3    | resource | google_compute_target_http_proxy                             | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 618 | CKV2_GCP_3    | resource | google_bigtable_instance_iam                                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 619 | CKV2_GCP_3    | resource | google_compute_region_disk_resource_policy_attachment        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 620 | CKV2_GCP_3    | resource | google_compute_region_ssl_certificate                        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 621 | CKV2_GCP_3    | resource | google_storage_bucket_iam                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 622 | CKV2_GCP_3    | resource | google_logging_project_exclusion                             | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 623 | CKV2_GCP_3    | resource | google_redis_instance                                        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 624 | CKV2_GCP_3    | resource | google_organization_iam_binding                              | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 625 | CKV2_GCP_3    | resource | google_dialogflow_agent                                      | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 626 | CKV2_GCP_3    | resource | google_storage_transfer_job                                  | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 627 | CKV2_GCP_3    | resource | google_compute_vpn_tunnel                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 628 | CKV2_GCP_3    | resource | google_bigquery_dataset                                      | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 629 | CKV2_GCP_3    | resource | google_dialogflow_intent                                     | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 630 | CKV2_GCP_3    | resource | google_cloudiot_device                                       | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 631 | CKV2_GCP_3    | resource | google_logging_metric                                        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 632 | CKV2_GCP_3    | resource | google_container_analysis_note                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 633 | CKV2_GCP_3    | resource | google_compute_subnetwork                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 634 | CKV2_GCP_3    | resource | google_healthcare_hl7_v2_store_iam                           | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 635 | CKV2_GCP_3    | resource | google_runtimeconfig_config                                  | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 636 | CKV2_GCP_3    | resource | google_sql_user                                              | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 637 | CKV2_GCP_3    | resource | google_iap_app_engine_service_iam                            | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 638 | CKV2_GCP_3    | resource | google_data_catalog_tag                                      | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 639 | CKV2_GCP_3    | resource | google_app_engine_application_url_dispatch_rules             | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 640 | CKV2_GCP_3    | resource | google_folder                                                | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 641 | CKV2_GCP_3    | resource | google_compute_backend_bucket                                | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 642 | CKV2_GCP_3    | resource | google_iap_client                                            | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 643 | CKV2_GCP_3    | resource | google_cloudfunctions_cloud_function_iam                     | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 644 | CKV2_GCP_3    | resource | google_bigtable_table                                        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 645 | CKV2_GCP_3    | resource | google_compute_target_pool                                   | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 646 | CKV2_GCP_3    | resource | google_data_catalog_tag_template                             | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 647 | CKV2_GCP_3    | resource | google_kms_crypto_key                                        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 648 | CKV2_GCP_3    | resource | google_compute_interconnect_attachment                       | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 649 | CKV2_GCP_3    | resource | google_healthcare_dicom_store_iam                            | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 650 | CKV2_GCP_3    | resource | google_logging_folder_bucket_config                          | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 651 | CKV2_GCP_3    | resource | google_composer_environment                                  | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 652 | CKV2_GCP_3    | resource | google_compute_router_interface                              | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 653 | CKV2_GCP_3    | resource | google_data_catalog_entry_group_iam                          | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 654 | CKV2_GCP_3    | resource | google_iap_brand                                             | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 655 | CKV2_GCP_3    | resource | google_dataproc_cluster                                      | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 656 | CKV2_GCP_3    | resource | google_storage_default_object_acl                            | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 657 | CKV2_GCP_3    | resource | google_healthcare_fhir_store_iam                             | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 658 | CKV2_GCP_3    | resource | google_compute_disk_resource_policy_attachment               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 659 | CKV2_GCP_3    | resource | google_sql_ssl_cert                                          | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 660 | CKV2_GCP_3    | resource | google_compute_region_health_check                           | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 661 | CKV2_GCP_3    | resource | google_resource_manager_lien                                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 662 | CKV2_GCP_3    | resource | google_dns_record_set                                        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 663 | CKV2_GCP_3    | resource | google_kms_secret_ciphertext                                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 664 | CKV2_GCP_3    | resource | google_compute_autoscaler                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 665 | CKV2_GCP_3    | resource | google_identity_platform_tenant                              | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 666 | CKV2_GCP_3    | resource | google_logging_folder_exclusion                              | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 667 | CKV2_GCP_3    | resource | google_sql_database_instance                                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 668 | CKV2_GCP_3    | resource | google_project_iam                                           | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 669 | CKV2_GCP_3    | resource | google_app_engine_firewall_rule                              | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 670 | CKV2_GCP_3    | resource | google_compute_http_health_check                             | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 671 | CKV2_GCP_3    | resource | google_compute_shared_vpc_service_project                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
 | 672 | CKV2_GCP_3    | resource | google_compute_instance_template                             | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 673 | CKV2_GCP_3    | resource | google_access_context_manager_service_perimeter              | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 674 | CKV2_GCP_3    | resource | google_billing_account_iam_policy                            | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 675 | CKV2_GCP_3    | resource | google_app_engine_flexible_app_version                       | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 676 | CKV2_GCP_3    | resource | google_healthcare_dataset                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 677 | CKV2_GCP_3    | resource | google_compute_target_pool                                   | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 678 | CKV2_GCP_3    | resource | google_organization_iam_policy                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 679 | CKV2_GCP_3    | resource | google_bigquery_dataset_iam                                  | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 680 | CKV2_GCP_3    | resource | google_dns_policy                                            | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 681 | CKV2_GCP_3    | resource | google_kms_secret_ciphertext                                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 682 | CKV2_GCP_3    | resource | google_compute_health_check                                  | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 683 | CKV2_GCP_3    | resource | google_compute_network_peering                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 684 | CKV2_GCP_3    | resource | google_compute_attached_disk                                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 685 | CKV2_GCP_3    | resource | google_logging_folder_exclusion                              | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 686 | CKV2_GCP_3    | resource | google_organization_iam_custom_role                          | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 687 | CKV2_GCP_3    | resource | google_compute_global_network_endpoint                       | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 688 | CKV2_GCP_3    | resource | google_compute_target_ssl_proxy                              | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 689 | CKV2_GCP_3    | resource | google_logging_organization_exclusion                        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 690 | CKV2_GCP_3    | resource | google_ml_engine_model                                       | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 691 | CKV2_GCP_3    | resource | google_container_node_pool                                   | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 692 | CKV2_GCP_3    | resource | google_compute_region_target_http_proxy                      | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 693 | CKV2_GCP_3    | resource | google_billing_account_iam_binding                           | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 694 | CKV2_GCP_3    | resource | google_compute_region_disk                                   | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 695 | CKV2_GCP_3    | resource | google_secret_manager_secret                                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 696 | CKV2_GCP_3    | resource | google_compute_ssl_policy                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 697 | CKV2_GCP_3    | resource | google_compute_node_group                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 698 | CKV2_GCP_3    | resource | google_container_cluster                                     | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 699 | CKV2_GCP_3    | resource | google_storage_default_object_acl                            | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 700 | CKV2_GCP_3    | resource | google_bigtable_app_profile                                  | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 701 | CKV2_GCP_3    | resource | google_runtimeconfig_config                                  | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 702 | CKV2_GCP_3    | resource | google_app_engine_application_url_dispatch_rules             | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 703 | CKV2_GCP_3    | resource | google_compute_target_tcp_proxy                              | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 704 | CKV2_GCP_3    | resource | google_logging_project_exclusion                             | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 705 | CKV2_GCP_3    | resource | google_healthcare_hl7_v2_store_iam                           | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 706 | CKV2_GCP_3    | resource | google_dns_record_set                                        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 707 | CKV2_GCP_3    | resource | google_sql_database                                          | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 708 | CKV2_GCP_3    | resource | google_organization_iam_member                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 709 | CKV2_GCP_3    | resource | google_compute_subnetwork                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 710 | CKV2_GCP_3    | resource | google_compute_backend_service_signed_url_key                | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 711 | CKV2_GCP_3    | resource | google_monitoring_uptime_check_config                        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 712 | CKV2_GCP_3    | resource | google_pubsub_subscription_iam                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 713 | CKV2_GCP_3    | resource | google_compute_instance                                      | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 714 | CKV2_GCP_3    | resource | google_data_catalog_tag                                      | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 715 | CKV2_GCP_3    | resource | google_compute_target_https_proxy                            | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 716 | CKV2_GCP_3    | resource | google_healthcare_dataset_iam                                | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 717 | CKV2_GCP_3    | resource | google_cloudiot_device                                       | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 718 | CKV2_GCP_3    | resource | google_app_engine_firewall_rule                              | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 719 | CKV2_GCP_3    | resource | google_compute_http_health_check                             | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 720 | CKV2_GCP_3    | resource | google_compute_backend_bucket_signed_url_key                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 721 | CKV2_GCP_3    | resource | google_compute_image                                         | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 722 | CKV2_GCP_3    | resource | google_folder_iam_audit_config                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 723 | CKV2_GCP_3    | resource | google_cloud_run_service                                     | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 724 | CKV2_GCP_3    | resource | google_secret_manager_secret_iam                             | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 725 | CKV2_GCP_3    | resource | google_healthcare_fhir_store_iam                             | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 726 | CKV2_GCP_3    | resource | google_iap_app_engine_version_iam                            | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 727 | CKV2_GCP_3    | resource | google_composer_environment                                  | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 728 | CKV2_GCP_3    | resource | google_endpoints_service                                     | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 729 | CKV2_GCP_3    | resource | google_sourcerepo_repository_iam                             | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 730 | CKV2_GCP_3    | resource | google_compute_shared_vpc_host_project                       | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 731 | CKV2_GCP_3    | resource | google_compute_subnetwork_iam                                | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 732 | CKV2_GCP_3    | resource | google_resource_manager_lien                                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 733 | CKV2_GCP_3    | resource | google_compute_node_template                                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 734 | CKV2_GCP_3    | resource | google_sql_ssl_cert                                          | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 735 | CKV2_GCP_3    | resource | google_pubsub_subscription                                   | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 736 | CKV2_GCP_3    | resource | google_redis_instance                                        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 737 | CKV2_GCP_3    | resource | google_cloudfunctions_function                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 738 | CKV2_GCP_3    | resource | google_compute_url_map                                       | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 739 | CKV2_GCP_3    | resource | google_organization_iam_binding                              | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 740 | CKV2_GCP_3    | resource | google_spanner_database_iam                                  | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 741 | CKV2_GCP_3    | resource | google_dialogflow_intent                                     | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 742 | CKV2_GCP_3    | resource | google_iap_web_backend_service_iam                           | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 743 | CKV2_GCP_3    | resource | google_logging_billing_account_exclusion                     | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 744 | CKV2_GCP_3    | resource | google_cloud_run_domain_mapping                              | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 745 | CKV2_GCP_3    | resource | google_storage_bucket_iam_binding                            | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 746 | CKV2_GCP_3    | resource | google_iap_web_type_compute_iam                              | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 747 | CKV2_GCP_3    | resource | google_bigtable_instance_iam                                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 748 | CKV2_GCP_3    | resource | google_data_catalog_tag_template                             | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 749 | CKV2_GCP_3    | resource | google_cloud_run_service_iam                                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 750 | CKV2_GCP_3    | resource | google_folder_organization_policy                            | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 751 | CKV2_GCP_3    | resource | google_compute_instance_group_manager                        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 752 | CKV2_GCP_3    | resource | google_compute_firewall                                      | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 753 | CKV2_GCP_3    | resource | google_data_catalog_entry                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 754 | CKV2_GCP_3    | resource | google_bigquery_dataset                                      | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 755 | CKV2_GCP_3    | resource | google_folder_iam_policy                                     | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 756 | CKV2_GCP_3    | resource | google_compute_project_metadata                              | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 757 | CKV2_GCP_3    | resource | google_iap_web_iam                                           | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 758 | CKV2_GCP_3    | resource | google_datastore_index                                       | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 759 | CKV2_GCP_3    | resource | google_compute_global_network_endpoint_group                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 760 | CKV2_GCP_3    | resource | google_project_iam_member                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 761 | CKV2_GCP_3    | resource | google_project_service                                       | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 762 | CKV2_GCP_3    | resource | google_compute_instance_from_template                        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 763 | CKV2_GCP_3    | resource | google_compute_region_instance_group_manager                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 764 | CKV2_GCP_3    | resource | google_cloudbuild_trigger                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 765 | CKV2_GCP_3    | resource | google_service_account_iam                                   | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 766 | CKV2_GCP_3    | resource | google_container_analysis_occurrence                         | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 767 | CKV2_GCP_3    | resource | google_compute_vpn_gateway                                   | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 768 | CKV2_GCP_3    | resource | google_spanner_instance_iam                                  | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 769 | CKV2_GCP_3    | resource | google_cloudiot_device_registry                              | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 770 | CKV2_GCP_3    | resource | google_identity_platform_tenant_oauth_idp_config             | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
-| 771 | CKV2_GCP_4    | resource | google_logging_project_sink                                  | Ensure that retention policies on log buckets are configured using Bucket Lock                                                                                                                           | Terraform |
+| 673 | CKV2_GCP_3    | resource | google_iap_tunnel_instance_iam                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 674 | CKV2_GCP_3    | resource | google_organization_policy                                   | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 675 | CKV2_GCP_3    | resource | google_monitoring_uptime_check_config                        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 676 | CKV2_GCP_3    | resource | google_compute_image                                         | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 677 | CKV2_GCP_3    | resource | google_ml_engine_model                                       | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 678 | CKV2_GCP_3    | resource | google_bigquery_dataset_iam                                  | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 679 | CKV2_GCP_3    | resource | google_logging_organization_sink                             | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 680 | CKV2_GCP_3    | resource | google_compute_instance                                      | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 681 | CKV2_GCP_3    | resource | google_service_account                                       | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 682 | CKV2_GCP_3    | resource | google_dns_managed_zone                                      | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 683 | CKV2_GCP_3    | resource | google_logging_folder_sink                                   | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 684 | CKV2_GCP_3    | resource | google_logging_organization_exclusion                        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 685 | CKV2_GCP_3    | resource | google_healthcare_dicom_store                                | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 686 | CKV2_GCP_3    | resource | google_cloud_run_domain_mapping                              | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 687 | CKV2_GCP_3    | resource | google_compute_region_autoscaler                             | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 688 | CKV2_GCP_3    | resource | google_bigquery_data_transfer_config                         | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 689 | CKV2_GCP_3    | resource | google_healthcare_dataset_iam                                | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 690 | CKV2_GCP_3    | resource | google_cloud_run_service                                     | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 691 | CKV2_GCP_3    | resource | google_identity_platform_inbound_saml_config                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 692 | CKV2_GCP_3    | resource | google_usage_export_bucket                                   | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 693 | CKV2_GCP_3    | resource | google_runtimeconfig_variable                                | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 694 | CKV2_GCP_3    | resource | google_dialogflow_entity_type                                | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 695 | CKV2_GCP_3    | resource | google_compute_target_ssl_proxy                              | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 696 | CKV2_GCP_3    | resource | google_storage_hmac_key                                      | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 697 | CKV2_GCP_3    | resource | google_compute_region_url_map                                | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 698 | CKV2_GCP_3    | resource | google_monitoring_notification_channel                       | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 699 | CKV2_GCP_3    | resource | google_bigtable_app_profile                                  | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 700 | CKV2_GCP_3    | resource | google_datastore_index                                       | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 701 | CKV2_GCP_3    | resource | google_compute_node_template                                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 702 | CKV2_GCP_3    | resource | google_identity_platform_oauth_idp_config                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 703 | CKV2_GCP_3    | resource | google_storage_default_object_access_control                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 704 | CKV2_GCP_3    | resource | google_compute_global_network_endpoint_group                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 705 | CKV2_GCP_3    | resource | google_compute_subnetwork_iam                                | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 706 | CKV2_GCP_3    | resource | google_os_config_patch_deployment                            | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 707 | CKV2_GCP_3    | resource | google_dataflow_flex_template_job                            | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 708 | CKV2_GCP_3    | resource | google_compute_region_disk                                   | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 709 | CKV2_GCP_3    | resource | google_dns_policy                                            | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 710 | CKV2_GCP_3    | resource | google_identity_platform_tenant_inbound_saml_config          | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 711 | CKV2_GCP_3    | resource | google_cloud_asset_organization_feed                         | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 712 | CKV2_GCP_3    | resource | google_iap_web_type_compute_iam                              | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 713 | CKV2_GCP_3    | resource | google_compute_address                                       | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 714 | CKV2_GCP_3    | resource | google_endpoints_service_iam                                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 715 | CKV2_GCP_3    | resource | google_compute_global_forwarding_rule                        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 716 | CKV2_GCP_3    | resource | google_secret_manager_secret_iam                             | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 717 | CKV2_GCP_3    | resource | google_binary_authorization_policy                           | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 718 | CKV2_GCP_3    | resource | google_compute_security_policy                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 719 | CKV2_GCP_3    | resource | google_app_engine_flexible_app_version                       | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 720 | CKV2_GCP_3    | resource | google_billing_account_iam_member                            | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 721 | CKV2_GCP_3    | resource | google_monitoring_slo                                        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 722 | CKV2_GCP_3    | resource | google_folder_iam_binding                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 723 | CKV2_GCP_3    | resource | google_folder_iam_member                                     | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 724 | CKV2_GCP_3    | resource | google_dataproc_autoscaling_policy                           | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 725 | CKV2_GCP_3    | resource | google_compute_project_metadata                              | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 726 | CKV2_GCP_3    | resource | google_cloud_asset_folder_feed                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 727 | CKV2_GCP_3    | resource | google_project_iam_custom_role                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 728 | CKV2_GCP_3    | resource | google_spanner_instance_iam                                  | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 729 | CKV2_GCP_3    | resource | google_compute_ssl_certificate                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 730 | CKV2_GCP_3    | resource | google_logging_billing_account_sink                          | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 731 | CKV2_GCP_3    | resource | google_access_context_manager_service_perimeter              | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 732 | CKV2_GCP_3    | resource | google_secret_manager_secret                                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 733 | CKV2_GCP_3    | resource | google_compute_backend_service_signed_url_key                | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 734 | CKV2_GCP_3    | resource | google_app_engine_application                                | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 735 | CKV2_GCP_3    | resource | google_service_networking_connection                         | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 736 | CKV2_GCP_3    | resource | google_container_cluster                                     | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 737 | CKV2_GCP_3    | resource | google_runtimeconfig_config_iam                              | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 738 | CKV2_GCP_3    | resource | google_identity_platform_tenant_default_supported_idp_config | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 739 | CKV2_GCP_3    | resource | google_identity_platform_default_supported_idp_config        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 740 | CKV2_GCP_3    | resource | google_logging_billing_account_bucket_config                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 741 | CKV2_GCP_3    | resource | google_binary_authorization_attestor                         | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 742 | CKV2_GCP_3    | resource | google_compute_router_nat                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 743 | CKV2_GCP_3    | resource | google_secret_manager_secret_version                         | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 744 | CKV2_GCP_3    | resource | google_organization_iam_custom_role                          | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 745 | CKV2_GCP_3    | resource | google_cloud_run_service_iam                                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 746 | CKV2_GCP_3    | resource | google_billing_account_iam_policy                            | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 747 | CKV2_GCP_3    | resource | google_storage_bucket_object                                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 748 | CKV2_GCP_3    | resource | google_compute_ssl_policy                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 749 | CKV2_GCP_3    | resource | google_compute_attached_disk                                 | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 750 | CKV2_GCP_3    | resource | google_logging_project_bucket_config                         | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 751 | CKV2_GCP_3    | resource | google_organization_iam_policy                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 752 | CKV2_GCP_3    | resource | google_access_context_manager_access_policy                  | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 753 | CKV2_GCP_3    | resource | google_project_service                                       | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 754 | CKV2_GCP_3    | resource | google_compute_region_backend_service                        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 755 | CKV2_GCP_3    | resource | google_endpoints_service                                     | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 756 | CKV2_GCP_3    | resource | google_active_directory_domain                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 757 | CKV2_GCP_3    | resource | google_compute_network                                       | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 758 | CKV2_GCP_3    | resource | google_compute_backend_service                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 759 | CKV2_GCP_3    | resource | google_compute_network_peering                               | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 760 | CKV2_GCP_3    | resource | google_folder_iam_policy                                     | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 761 | CKV2_GCP_3    | resource | google_iap_web_backend_service_iam                           | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 762 | CKV2_GCP_3    | resource | google_spanner_instance                                      | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 763 | CKV2_GCP_3    | resource | google_bigquery_table                                        | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 764 | CKV2_GCP_3    | resource | google_tpu_node                                              | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 765 | CKV2_GCP_3    | resource | google_container_analysis_occurrence                         | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 766 | CKV2_GCP_3    | resource | google_healthcare_dataset                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 767 | CKV2_GCP_3    | resource | google_dataproc_job                                          | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 768 | CKV2_GCP_3    | resource | google_container_node_pool                                   | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 769 | CKV2_GCP_3    | resource | google_data_catalog_entry                                    | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 770 | CKV2_GCP_3    | resource | google_access_context_manager_access_level                   | Ensure that there are only GCP-managed service account keys for each service account                                                                                                                     | Terraform |
+| 771 | CKV2_GCP_4    | resource | google_logging_organization_sink                             | Ensure that retention policies on log buckets are configured using Bucket Lock                                                                                                                           | Terraform |
 | 772 | CKV2_GCP_4    | resource | google_logging_folder_sink                                   | Ensure that retention policies on log buckets are configured using Bucket Lock                                                                                                                           | Terraform |
-| 773 | CKV2_GCP_4    | resource | google_storage_bucket                                        | Ensure that retention policies on log buckets are configured using Bucket Lock                                                                                                                           | Terraform |
-| 774 | CKV2_GCP_4    | resource | google_logging_organization_sink                             | Ensure that retention policies on log buckets are configured using Bucket Lock                                                                                                                           | Terraform |
+| 773 | CKV2_GCP_4    | resource | google_logging_project_sink                                  | Ensure that retention policies on log buckets are configured using Bucket Lock                                                                                                                           | Terraform |
+| 774 | CKV2_GCP_4    | resource | google_storage_bucket                                        | Ensure that retention policies on log buckets are configured using Bucket Lock                                                                                                                           | Terraform |
 | 775 | CKV2_GCP_5    | resource | google_project_iam_audit_config                              | Ensure that Cloud Audit Logging is configured properly across all services and all users from a project                                                                                                  | Terraform |
 | 776 | CKV2_GCP_5    | resource | google_project                                               | Ensure that Cloud Audit Logging is configured properly across all services and all users from a project                                                                                                  | Terraform |
-| 777 | CKV2_GCP_6    | resource | google_kms_crypto_key_iam_binding                            | Ensure that Cloud KMS cryptokeys are not anonymously or publicly accessible                                                                                                                              | Terraform |
-| 778 | CKV2_GCP_6    | resource | google_kms_crypto_key_iam_member                             | Ensure that Cloud KMS cryptokeys are not anonymously or publicly accessible                                                                                                                              | Terraform |
+| 777 | CKV2_GCP_6    | resource | google_kms_crypto_key_iam_member                             | Ensure that Cloud KMS cryptokeys are not anonymously or publicly accessible                                                                                                                              | Terraform |
+| 778 | CKV2_GCP_6    | resource | google_kms_crypto_key_iam_binding                            | Ensure that Cloud KMS cryptokeys are not anonymously or publicly accessible                                                                                                                              | Terraform |
 | 779 | CKV2_GCP_6    | resource | google_kms_crypto_key                                        | Ensure that Cloud KMS cryptokeys are not anonymously or publicly accessible                                                                                                                              | Terraform |
 | 780 | CKV2_GCP_7    | resource | google_sql_user                                              | Ensure that a MySQL database instance does not allow anyone to connect with administrative privileges                                                                                                    | Terraform |
 | 781 | CKV2_GCP_7    | resource | google_sql_database_instance                                 | Ensure that a MySQL database instance does not allow anyone to connect with administrative privileges                                                                                                    | Terraform |
diff --git a/kubernetes/requirements.txt b/kubernetes/requirements.txt
index 5bcc0afcd..d77f4a74b 100644
--- a/kubernetes/requirements.txt
+++ b/kubernetes/requirements.txt
@@ -1,1 +1,1 @@
-checkov==2.0.413
+checkov==2.0.415


Test patch:
diff --git a/tests/serverless/checks/test_check_types.py b/tests/serverless/checks/test_check_types.py
index feb495150..fc89f5e1c 100644
--- a/tests/serverless/checks/test_check_types.py
+++ b/tests/serverless/checks/test_check_types.py
@@ -70,7 +70,7 @@ class ATestCompleteCheck(BaseCompleteCheck):
         super().__init__(name="test", id=id, categories=CATS, supported_entities=['serverless_aws'])
 
     def scan_complete_conf(self, conf):
-        if conf["service"]["awsKmsKeyArn"] != "arn:aws:kms:us-east-1:XXXXXX:key/some-hash":
+        if isinstance(conf["service"], dict) and conf["service"].get("awsKmsKeyArn") != "arn:aws:kms:us-east-1:XXXXXX:key/some-hash":
             return CheckResult.FAILED
         if conf["provider"]["runtime"] != "nodejs12.x":
             return CheckResult.FAILED
@@ -179,7 +179,7 @@ class ATestServiceCheck(BaseServiceCheck):
         super().__init__(name="test", id=id, categories=CATS, supported_entities=['serverless_aws'])
 
     def scan_service_conf(self, conf):
-        if conf.get("awsKmsKeyArn") == "arn:aws:kms:us-east-1:XXXXXX:key/some-hash":
+        if isinstance(conf, dict) and conf.get("awsKmsKeyArn") == "arn:aws:kms:us-east-1:XXXXXX:key/some-hash":
             return CheckResult.PASSED
         else:
             return CheckResult.FAILED
diff --git a/tests/serverless/runner/resources/serverless.yaml b/tests/serverless/runner/resources/serverless.yaml
new file mode 100644
index 000000000..a86b4d83b
--- /dev/null
+++ b/tests/serverless/runner/resources/serverless.yaml
@@ -0,0 +1,59 @@
+service: acme-service
+
+frameworkVersion: "^2.30.0"
+
+plugins:
+  - serverless-vpc-discovery
+
+custom:
+  resources: ${file(./serverless.${opt:stage}.yml)}
+  vpc:
+    vpcName: acme-vpc
+    subnetNames:
+      - private-subnet-a
+      - private-subnet-b
+    securityGroupNames:
+      - allow_out_to_vpc_endpoints
+      - lambda_sg
+provider:
+  region: us-east-1
+  name: aws
+  runtime: python3.7
+  tracing:
+    lambda: true
+  deploymentBucket: ${self:custom.resources.deploymentBucket}
+  environment: ${self:custom.resources.environment}
+  iamManagedPolicies:
+    - arn:aws:iam::aws:policy/ReadOnlyAccess
+  iamRoleStatements: ${self:custom.resources.iamRoleStatements}
+  ecr:
+    images:
+      base:
+        path: ../../
+        file: ./path/to/Dockerfile
+
+functions:
+  acmeFunc:
+    image: base
+    timeout: 120
+    memorySize: 3000
+    environment:
+      EFS_MOUNT_PATH: ${self:custom.localMountPath}
+    fileSystemConfig:
+      localMountPath: ${self:custom.localMountPath}
+      arn: 'arn:aws:elasticfilesystem:${self:provider.region}:#{AWS::AccountId}:access-point/${self:custom.resources.efsAccessPoint}'
+    events:
+      - sqs:
+          arn: arn:aws:sqs:#{AWS::Region}:#{AWS::AccountId}:job_queue
+          batchSize: 10
+          maximumBatchingWindow: 0
+  acmeFunc2:
+    image: base
+    environment:
+      EFS_MOUNT_PATH: ${self:custom.localMountPath}
+      CLEAN_UP_BEFORE_PROCESS: 'true'
+    timeout: 900
+    memorySize: 9000
+    fileSystemConfig:
+      localMountPath: ${self:custom.localMountPath}
+      arn: 'arn:aws:elasticfilesystem:${self:provider.region}:#{AWS::AccountId}:access-point/${self:custom.resources.efsAccessPoint}'
\ No newline at end of file
diff --git a/tests/serverless/runner/test_runner.py b/tests/serverless/runner/test_runner.py
index 647583916..ab540ff47 100644
--- a/tests/serverless/runner/test_runner.py
+++ b/tests/serverless/runner/test_runner.py
@@ -116,6 +116,16 @@ class TestRunnerValid(unittest.TestCase):
 
         assert len(check_imports) == 0, f"Wrong imports were added: {check_imports}"
 
+    def test_provider_function_att_type_mismatch(self):
+        runner = Runner()
+        current_dir = os.path.dirname(os.path.realpath(__file__))
+        scan_file_path = os.path.join(current_dir, "resources", "serverless.yaml")
+        file_abs_path = os.path.abspath(scan_file_path)
+
+        report = runner.run(files=[file_abs_path], runner_filter=RunnerFilter(framework='serverless'), root_folder="")
+        self.assertEqual(0, len(report.parsing_errors))
+        self.assertLess(0, len(report.passed_checks + report.failed_checks))
+
     def tearDown(self):
         pass