google_iam_service_account_keys resource
Syntax
A google_iam_service_account_keys is used to test a Google ServiceAccountKey resource
Examples
describe google_iam_service_account_keys(project: 'chef-gcp-inspec', service_account: "display-name@project-id.iam.gserviceaccount.com") do
its('count') { should be <= 1000 }
end
Properties
Properties that can be accessed from the google_iam_service_account_keys resource:
See the google_iam_service_account_key resource for more information.
key_names- an array of
google_iam_service_account_keyname private_key_types- an array of
google_iam_service_account_keyprivate_key_type key_algorithms- an array of
google_iam_service_account_keykey_algorithm private_key_data- an array of
google_iam_service_account_keyprivate_key_data public_key_data- an array of
google_iam_service_account_keypublic_key_data valid_after_times- an array of
google_iam_service_account_keyvalid_after_time valid_before_times- an array of
google_iam_service_account_keyvalid_before_time key_types- an array of
google_iam_service_account_keykey_type service_accounts- an array of
google_iam_service_account_keyservice_account paths- an array of
google_iam_service_account_keypath
Filter Criteria
This resource supports all of the above properties as filter criteria, which can be used
with where as a block or a method.
GCP Permissions
Ensure the Identity and Access Management (IAM) API is enabled for the current project.