gcp-serviceaccounts-id-token-output

Service Account Credentials returns a signed OpenID Connect ID token.

gcpcritical service: gcp:serviceaccounts emits ExposesCredential

Where it sits

locationiamcredentials.projects.serviceAccounts.generateIdToken.token
location kindoutput_value
data kindsoauth_token bearer_token credential
emits edgeExposesCredential
serviceService Accounts (gcp:serviceaccounts)

Collection recipe

access moderead_api
operationiamcredentials.projects.serviceAccounts.generateIdToken
response pathtoken
encodingstring
params{"name": "\u003cresource-name\u003e"}

Required permissions

iam.serviceAccounts.getOpenIdToken

References

move · open · esc close