turbot/gcp_compliance
Loading controls...

Control: Ensure that there are only GCP-managed service account keys for each service account

Description

User managed service accounts should not have user-managed keys.

Usage

Run the control in your terminal:

powerpipe control run gcp_compliance.control.iam_service_account_gcp_managed_key

Snapshot and share results via Turbot Pipes:

powerpipe login
powerpipe control run gcp_compliance.control.iam_service_account_gcp_managed_key --share

SQL

This control uses a named query:

iam_service_account_gcp_managed_key

Tags