Skip to main content

💼 1.14 Ensure API Keys Are Restricted to Only APIs That Application Needs Access - Level 1 (Manual)

  • Contextual name: 💼 1.14 Ensure API Keys Are Restricted to Only APIs That Application Needs Access - Level 1 (Manual)
  • ID: /frameworks/cis-gcp-v1.3.0/01/14
  • Located in: 💼 1 Identity and Access Management

Description​

API keys are always at risk because they can be viewed publicly, such as from within a browser, or they can be accessed on a device where the key resides. It is recommended to restrict API keys to use (call) only APIs required by an application.

Similar​

  • Internal
    • ID: dec-c-82b526de

Sub Sections​

SectionSub SectionsInternal RulesPoliciesFlags