org-policy-deny-service-account-creation.log

Query: protoPayload.methodName: "google.iam.admin.v1.CreateServiceAccount"
Service account creation denial:
{
  "protoPayload": {
    "@type": "type.googleapis.com/google.cloud.audit.AuditLog",
    "status": {
      "code": 9,
      "message": "Service account creation is not allowed on this project.",
      "details": [
        {
          "@type": "type.googleapis.com/google.rpc.PreconditionFailure",
          "violations": [
            {
              "type": "constraints/iam.disableServiceAccountCreation",
              "subject": "projects/customer-monitoring-prod/serviceAccounts/?configvalue=",
              "description": "Service account creation is not allowed on this project."
            }
          ]
        }
      ]
    },
    "authenticationInfo": {
      "principalEmail": "user@domain.com",
      "principalSubject": "user:user@domain.com"
    },
    "requestMetadata": {
      "callerIp": "8.8.8.8",
      "callerSuppliedUserAgent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/93.0.4577.63 Safari/537.36,gzip(gfe)",
      "requestAttributes": {
        "time": "2021-09-13T03:14:16.111151030Z",
        "auth": {}
      },
      "destinationAttributes": {}
    },
    "serviceName": "iam.googleapis.com",
    "methodName": "google.iam.admin.v1.CreateServiceAccount",
    "authorizationInfo": [
      {
        "resource": "projects/customer-monitoring-prod",
        "permission": "iam.serviceAccounts.create",
        "granted": true,
        "resourceAttributes": {}
      }
    ],
    "resourceName": "projects/customer-monitoring-prod",
    "request": {
      "service_account": {
        "display_name": "t53w5"
      },
      "account_id": "t53w5-647",
      "name": "projects/customer-monitoring-prod",
      "@type": "type.googleapis.com/google.iam.admin.v1.CreateServiceAccountRequest"
    },
    "response": {
      "@type": "type.googleapis.com/google.iam.admin.v1.ServiceAccount"
    }
  },
  "insertId": "1lq3ka9eoo46p",
  "resource": {
    "type": "service_account",
    "labels": {
      "project_id": "customer-monitoring-prod",
      "email_id": "",
      "unique_id": ""
    }
  },
  "timestamp": "2021-09-13T03:14:16.099727577Z",
  "severity": "ERROR",
  "logName": "projects/customer-monitoring-prod/logs/cloudaudit.googleapis.com%2Factivity",
  "receiveTimestamp": "2021-09-13T03:14:17.060142118Z"
}