Control: GCP > CIS v1 > 1 Identity and Access Management > 1.10 Ensure API keys are not created for a project (Not Scored)
Configures auditing against a CIS Benchmark item.
Level: 2 (Not Scored)
Keys are insecure because they can be viewed publicly, such as from within a browser, or they can be accessed on a device where the key resides. It is recommended to use standard authentication flow instead.
Resource Types
This control targets the following resource types:
Primary Policies
The following policies can be used to configure this control:
- 1.10 Ensure API keys are not created for a project (Not Scored)
- 1.10 Ensure API keys are not created for a project (Not Scored) > Attestation
Category
In Your Workspace
Developers
- tmod:@turbot/gcp-cisv1#/control/types/r0110
- tmod:@turbot/cis#/control/categories/v0716
- turbot graphql controls --filter "controlTypeId:tmod:@turbot/gcp-cisv1#/control/types/r0110"
Get Controls
Control Type URI
Category URI
GraphQL
CLI