Control: GCP > IAM > Service Account Key > Usage

The Usage control determines whether the number of GCP IAM service account key resources exceeds the configured usage limit for this serviceAccount.

You can configure the behavior of this control with the GCP > IAM > Service Account Key > Usage policy, and set the limit with the GCP > IAM > Service Account Key > Usage > Limit policy.

Resource Types

This control targets the following resource types:

GCP > IAM > Service Account

Primary Policies

The following policies can be used to configure this control:

In Your Workspace

Developers

Control Type URI

tmod:@turbot/gcp-iam#/control/types/serviceAccountKeyUsage

Category URI

tmod:@turbot/turbot#/control/categories/resourceUsage

GraphQL

query controlType(id: "tmod:@turbot/gcp-iam#/control/types/serviceAccountKeyUsage") { … }

query controls(filter: "controlTypeId:'tmod:@turbot/gcp-iam#/control/types/serviceAccountKeyUsage'") { … }

CLI

Get Controls

turbot graphql controls --filter "controlTypeId:tmod:@turbot/gcp-iam#/control/types/serviceAccountKeyUsage"