Control: Check if service account keys are older than 100 days
Usage
Run the control in your terminal:
powerpipe control run gcp_compliance.control.iam_restrict_service_account_key_age_one_hundred_daysSnapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run gcp_compliance.control.iam_restrict_service_account_key_age_one_hundred_days --shareSQL
This control uses a named query:
iam_service_account_key_age_100