Remediation
From Google Cloud Consoleβ
- Go to the IAM page in the GCP Console using https://console.cloud.google.com/iam-admin/iam
- In the left navigation pane, click
Service accounts
. All service accounts and their corresponding keys are listed. - Click the service account.
- Click the
edit
and delete the keys.
From Google Cloud CLIβ
To delete a user managed Service Account Key:
gcloud iam service-accounts keys delete --iam-account=<user-managed-service-account-EMAIL> <KEY-ID>