Harden Google Cloud IAM for Security & Compliance