Query: Ensure user-managed/external keys for service accounts are rotated every 90 days or less

Description

Service Account keys consist of a key ID (Private_key_Id) and Private key, which are used to sign programmatic requests users make to Google cloud services accessible to that particular service account. It is recommended that all Service Account keys are regularly rotated.

Query

Tables used in this query:

• gcp_service_account_key

Controls using this query:

• 1.7 Ensure User-Managed/External Keys for Service Accounts Are Rotated Every 90 Days or Fewer
• 1.7 Ensure user-managed/external keys for service accounts are rotated every 90 days or less
• 1.7 Ensure user-managed/external keys for service accounts are rotated every 90 days or less
• 1.7 Ensure user-managed/external keys for service accounts are rotated every 90 days or less
• Ensure user-managed/external keys for service accounts are rotated every 90 days or less

SQL