Tag: service-account

GCP service account keys that are never rotated are effectively permanent credentials — every key that exists is an attack surface that should ideally not exist.