Control: Ensure that there are only GCP-managed service account keys for each service account
Description
User managed service accounts should not have user-managed keys.
Usage
Run the control in your terminal:
powerpipe control run gcp_compliance.control.iam_service_account_gcp_managed_keySnapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run gcp_compliance.control.iam_service_account_gcp_managed_key --shareSQL
This control uses a named query:
iam_service_account_gcp_managed_key