Policy Setting: GCP > IAM > Service Account Key > Active

resource "turbot_policy_setting" "gcp_iam_service_account_key_active" {
  resource = turbot_policy_pack.main.id
  type     = "tmod:@turbot/gcp-iam#/policy/types/serviceAccountKeyActive"
  note     = "GCP CIS v2.0.0 - Control: 1.7"
  value    = "Check: Active"
  # value    =  "Enforce: Delete inactive with 90 days warning"
}