Creating, managing, and retiring Service Accounts

[@googlecloudtech]

Get $300 and start running workloads for free → goo.gle/3rnz8vj

[@SanderSurio-vd9td]

Ok 0:54

[@smritichile]

How often do you recommend rotating service account credentials/ keys?

[@Yggdrasil42]

Is there a way to find out which service account keys are in active use and where?

[@Tenelia]

second this. how do I know where these accounts are being called, and what level?

[@rogermartinez9626]

You can use Logs Explorer to search the key by its key id to see when it's been used. It'll be referenced in protoPayload.authenticationInfo.serviceAccountKeyName in the format "//iam.googleapis.com/projects/PROJECT_ID/serviceAccounts/SERVICE_ACCOUNT/keys/KEY_ID"

[@uxweb]

Awesome, great content!

[@googlecloudtech]

Glad you enjoyed it

[@workaccount-s4q]

When a new service account is being created (project associated with firebase)...some roles are being inherited automatically...like firebase admin sdk is being inherited and i am unable to delete that permission. I want to create one service account which can only have access to firebase realtime database and no other permissions (even cloud firestore). How do i achieve this.... Is it possible ?

[@jabercherif980]

Awsome

[@DanceAddiction-tr6rz]

Just total jibberish.