LOW
Source
CloudSploit
ID
project-api-keys

Project API Keys

Ensure there are no API keys created within GCP project.

API Keys are insecure because they can be viewed publicly, such as from within a browser, or they can be accessed on a device where the key resides. To avoid the security risk in using API keys, it is recommended to use standard authentication flow instead.

Ensure that there are no API Keys within the project.