Google > IAM >

Service Account Token Creator

MEDIUM

Source

CloudSploit

service-account-token-creator

management console

Service Account Token Creator

Ensures that no users have the Service Account Token Creator role.

For best security practices, IAM users should not have Service Account Token Creator role.

Recommended Actions

Ensure that no IAM user have Service Account Token Creator Role at GCP project level.

Links

https://cloud.google.com/iam/docs/overview

Aqua Container Security

Aqua Security is the largest pure-play cloud native security company, providing customers the freedom to innovate and run their businesses with minimal friction. The Aqua Cloud Native Security Platform provides prevention, detection, and response automation across the entire application lifecycle to secure the build, secure cloud infrastructure and secure running workloads wherever they are deployed.