Question

A security review at your company flagged a service account that may have keys being used outside your organization. Your manager asks you to determine how many user-managed keys currently exist for the service account named batch-runner@my-project.iam.gserviceaccount.com so you can decide which ones to delete. Which action retrieves this information?

Accepted Answer

Run 'gcloud iam service-accounts keys list --iam-account=batch-runner@my-project.iam.gserviceaccount.com' and review the returned keys.

Answer

Run 'gcloud projects get-iam-policy my-project' and count the bindings that reference the service account.

Answer

Run 'gcloud iam service-accounts list' and read the KEY_COUNT column in the output.

Answer

Enable Data Access audit logs and count the number of authentication events for the service account in Cloud Logging.