MEDIUM
Source
CloudSploit
ID
disable-service-account-creation

Disable Service Account Creation

Determine if “Disable Service Account Creation” policy is enforced at the GCP organization level.

Enforcing the “Disable Service Account Creation” policy allows you to centrally manage your service accounts and reduces the chances of compromised service accounts being used to access your GCP resources.

Ensure that “Disable Service Account Creation” constraint is enforced at the organization level.