gcp-serviceaccounts-signed-jwt-output
A signed JWT can act as a bearer assertion even though the private key is not returned.
Where it sits
| location | iamcredentials.projects.serviceAccounts.signJwt.signedJwt |
| location kind | output_value |
| data kinds | credential signing_secret |
| emits edge | ExposesCredential |
| service | Service Accounts (gcp:serviceaccounts) |
Collection recipe
| access mode | read_api |
| operation | iamcredentials.projects.serviceAccounts.signJwt |
| response path | signedJwt |
| encoding | string |
| params | {"name": "\u003cresource-name\u003e"} |
Required permissions
iam.serviceAccounts.signJwt
References