Google > IAM >

Service Account Managed Keys

MEDIUM

Source

CloudSploit

service-account-managed-keys

management console

Service Account Managed Keys

Ensures that service account keys are being managed by Google.

Service account keys should be managed by Google to ensure that they are as secure as possible, including key rotations and restrictions to the accessibility of the keys.

Recommended Actions

Ensure all user service account keys are being managed by Google.

Links

https://cloud.google.com/iam/docs/creating-managing-service-account-keys

Aqua Container Security

Aqua Security is the largest pure-play cloud native security company, providing customers the freedom to innovate and run their businesses with minimal friction. The Aqua Cloud Native Security Platform provides prevention, detection, and response automation across the entire application lifecycle to secure the build, secure cloud infrastructure and secure running workloads wherever they are deployed.