gcp-serviceaccounts-service-account-description
Service-account display names and descriptions are plaintext customer-controlled metadata.
Where it sits
| location | iam.projects.serviceAccounts.get.{displayName,description} |
|---|
| location kind | metadata |
|---|
| data kinds | credential api_key sensitive_data pii |
|---|
| emits edge | ContainsSecret |
|---|
| service | Service Accounts (gcp:serviceaccounts) |
|---|
Collection recipe
| access mode | read_api |
|---|
| operation | iam.projects.serviceAccounts.get |
|---|
| response path | {displayName,description} |
|---|
| encoding | json |
|---|
| params | {"name": "\u003cresource-name\u003e"} |
|---|
Required permissions
iam.serviceAccounts.get
References