Control: Ensure that there are only GCP-managed service account keys for each service account
User-managed service accounts should not have user-managed keys. It is recommended that only GCP-managed service account keys are used for each service account.
Run the control in your terminal:
steampipe check terraform_gcp_compliance.control.iam_service_account_gcp_managed_key
Snapshot and share results via Steampipe Cloud:
steampipe loginsteampipe check --share terraform_gcp_compliance.control.iam_service_account_gcp_managed_key
This control uses a named query:iam_service_account_gcp_managed_key