Google Cloud service account keys

Assess

Techniques

Persistent credentials used by service accounts to authenticate to Google Cloud services.

Why it's here

Placed in Assess: 1 article(s) of evidence from 1 source(s), led by security coverage, with 0 in the last 30 days. Confidence 24%. Low accumulated evidence, so it defaults conservatively pending more signal.

Evidence (1)

7InfoQ·8/31/2026security
GCP Workload Identity Federation Replaces Long-Lived Service Account Keys
The article explains how long-lived Google Cloud service account keys create ongoing secret-management and rotation risks, making them easy to leak and hard to govern. It highlights how Workload Identity Federation changes machine identity by using federated trust relationships and attribute conditions instead of permanent keys, based on a rollout across more than 120 production projects.