> For the complete documentation index, see [llms.txt](https://docs.forestall.io/forestall/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.forestall.io/forestall/search-and-reports/gcp-entities/service-account-key.md).

# Service Account Key

The **GCPServiceAccountKey** entity represents a cryptographic key associated with a GCP service account, used for authenticating as that service account.

| Field            | Type    | Possible Operators                                             | Description                                                 |
| ---------------- | ------- | -------------------------------------------------------------- | ----------------------------------------------------------- |
| Guid             | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | Unique identifier for the entity in Forestall               |
| FSName           | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | Display name used in Forestall                              |
| Name             | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | Full resource name of the service account key               |
| KeyId            | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | Unique ID of the service account key                        |
| ProjectId        | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | GCP project the key belongs to                              |
| ServiceAccountId | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | ID of the service account this key is associated with       |
| KeyType          | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | Type of the key (e.g. USER\_MANAGED, SYSTEM\_MANAGED)       |
| KeyOrigin        | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | Origin of the key (e.g. GOOGLE\_PROVIDED, USER\_PROVIDED)   |
| KeyAlgorithm     | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | Algorithm used by the key (e.g. KEY\_ALG\_RSA\_2048)        |
| IsDisabled       | BOOLEAN | N/A (toggle)                                                   | Whether the key is currently disabled                       |
| ValidBeforeTime  | DATE    | SMALLER, LARGER, BETWEEN, EQUAL, IS\_EMPTY                     | Expiry timestamp: the key is not valid after this time      |
| ValidAfterTime   | DATE    | SMALLER, LARGER, BETWEEN, EQUAL, IS\_EMPTY                     | Activation timestamp: the key is not valid before this time |
| GCPTier          | NUMBER  | EQUAL, BETWEEN, SMALLER, LARGER, SMALLER\_EQUAL, LARGER\_EQUAL | GCP tier classification assigned by Forestall               |
| risk             | NUMBER  | EQUAL, BETWEEN, SMALLER, LARGER, SMALLER\_EQUAL, LARGER\_EQUAL | Risk score assigned to the entity                           |
| ExposurePoint    | NUMBER  | EQUAL, BETWEEN, SMALLER, LARGER, SMALLER\_EQUAL, LARGER\_EQUAL | Exposure point score assigned to the entity                 |