Ensure User-Managed/External Keys for Service Accounts are Rotated Every 90 Days or Less in GCP
Service Account keys consist of a key ID (Private_key_Id) and Private key, which are used to sign programmatic requests users make to Google cloud services accessible to that particular service account. It is recommended that all Service Account keys are regularly rotated. Send results via Email.
icon
Breakdown
  1. Ensure User-Managed/External Keys for Service Accounts are Rotated Every 90 Days or Less.
  2. Send results via Email. This result step can be changed from Email to Slack, Microsoft Teams or Discord.