The GCPServiceAccountKey entity represents a cryptographic key associated with a GCP service account, used for authenticating as that service account.
| Field | Type | Possible Operators | Description |
|---|---|---|---|
| Guid | TEXT | LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY | Unique identifier for the entity in Forestall |
| FSName | TEXT | LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY | Display name used in Forestall |
| Name | TEXT | LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY | Full resource name of the service account key |
| KeyId | TEXT | LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY | Unique ID of the service account key |
| ProjectId | TEXT | LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY | GCP project the key belongs to |
| ServiceAccountId | TEXT | LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY | ID of the service account this key is associated with |
| KeyType | TEXT | LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY | Type of the key (e.g. USER_MANAGED, SYSTEM_MANAGED) |
| KeyOrigin | TEXT | LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY | Origin of the key (e.g. GOOGLE_PROVIDED, USER_PROVIDED) |
| KeyAlgorithm | TEXT | LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY | Algorithm used by the key (e.g. KEY_ALG_RSA_2048) |
| IsDisabled | BOOLEAN | N/A (toggle) | Whether the key is currently disabled |
| ValidBeforeTime | DATE | SMALLER, LARGER, BETWEEN, EQUAL, IS_EMPTY | Expiry timestamp: the key is not valid after this time |
| ValidAfterTime | DATE | SMALLER, LARGER, BETWEEN, EQUAL, IS_EMPTY | Activation timestamp: the key is not valid before this time |
| GCPTier | NUMBER | EQUAL, BETWEEN, SMALLER, LARGER, SMALLER_EQUAL, LARGER_EQUAL | GCP tier classification assigned by Forestall |
| risk | NUMBER | EQUAL, BETWEEN, SMALLER, LARGER, SMALLER_EQUAL, LARGER_EQUAL | Risk score assigned to the entity |
| ExposurePoint | NUMBER | EQUAL, BETWEEN, SMALLER, LARGER, SMALLER_EQUAL, LARGER_EQUAL | Exposure point score assigned to the entity |