Control: Ensure user-managed/external keys for service accounts are rotated every 90 days or less
Description
Service Account keys consist of a key ID (Private_key_Id) and Private key, which are used to sign programmatic requests users make to Google cloud services accessible to that particular service account. It is recommended that all Service Account keys are regularly rotated.
Usage
Run the control in your terminal:
powerpipe control run gcp_compliance.control.iam_service_account_key_age_90Snapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run gcp_compliance.control.iam_service_account_key_age_90 --shareSQL
This control uses a named query:
iam_service_account_key_age_90