Control: Ensure that there are only GCP-managed service account keys for each service account
Description
User-managed service accounts should not have user-managed keys. It is recommended that only GCP-managed service account keys are used for each service account.
Usage
Run the control in your terminal:
powerpipe control run terraform_gcp_compliance.control.iam_service_account_gcp_managed_keySnapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run terraform_gcp_compliance.control.iam_service_account_gcp_managed_key --shareSQL
This control uses a named query:
iam_service_account_gcp_managed_key