gcp-serviceaccounts-access-token-output

Service Account Credentials returns a usable OAuth access token for the target service account.

gcpcritical service: gcp:serviceaccounts emits ExposesCredential

Where it sits

locationiamcredentials.projects.serviceAccounts.generateAccessToken.accessToken
location kindoutput_value
data kindsoauth_token bearer_token credential
emits edgeExposesCredential
serviceService Accounts (gcp:serviceaccounts)

Collection recipe

access moderead_api
operationiamcredentials.projects.serviceAccounts.generateAccessToken
response pathaccessToken
encodingstring
params{"name": "projects/-/serviceAccounts/\u003cemail\u003e"}

Required permissions

iam.serviceAccounts.getAccessToken

References

move · open · esc close