hard20 pts · first answer countscloud-securitygcp-iam

Stopping service account key downloads

Your GCP security standard says no one may create downloadable service account keys. What enforces this across every project in the organization?

A.The org policy iam.disableServiceAccountKeyCreationB.Removing the Owner role from every user in every projectC.A VPC firewall rule blocking iam.googleapis.comD.Setting each new key's expiry to one day only

Discussion 0

Join free to post in the discussion.

Stopping service account key downloads

Discussion 0

Related questions