Table: gcp_service_account_key

Service Account Keys are public/private RSA key pairs which are used to authenticate to Google Cloud APIs.

Examples

List of service accounts using user managed keys

select
  service_account_name as service_account,
  title,
  key_type
from
  gcp_service_account_key
where
  key_type = 'USER_MANAGED';

Validity time for the service account keys

select
  title,
  service_account_name as service_account,
  valid_after_time,
  valid_before_time
from
  gcp_service_account_key;

Get public key data for a service account key

select
  name,
  key_type,
  key_origin,
  public_key_data_raw,
  public_key_data_pem
from
  gcp_service_account_key
where
  service_account_name = 'test@myproject.iam.gserviceaccount.com';

Query examples

.inspect gcp_service_account_key

GCP Service Account Key

Name	Type	Description
_ctx	jsonb	Steampipe context in JSON form, e.g. connection_name.
akas	jsonb	Array of globally unique identifier strings (also known as) for the resource.
key_algorithm	text	Specifies the algorithm (and possibly key size) for the key.
key_origin	text	Specifies the origin of the key.
key_type	text	The type of the service account key.
location	text	The GCP multi-region, region, or zone in which the resource is located.
name	text	The friendly name that identifies the service account key.
project	text	The GCP Project in which the resource is located.
public_key_data_pem	text	Specifies the public key data in PEM format.
public_key_data_raw	text	Specifies the public key data in raw format.
service_account_name	text	Service account in which the key is located.
title	text	Title of the resource.
valid_after_time	timestamp with time zone	Specifies the timestamp, after which the key can be used.
valid_before_time	timestamp with time zone	Specifies the timestamp, after which the key gets invalid.

turbot/gcp

Table: gcp_service_account_key

Examples

List of service accounts using user managed keys

Validity time for the service account keys

Get public key data for a service account key

Query examples

.inspect gcp_service_account_key

Steampipe

Resources

Community