> For the complete documentation index, see [llms.txt](https://docs.forestall.io/fsprotect/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.forestall.io/fsprotect/search-and-reports/gcp-entities/service-account-key.md).

# Service Account Key

The **GCPServiceAccountKey** entity represents a cryptographic key associated with a GCP service account, used for authenticating as that service account.

| Field            | Type    | Possible Operators                                                 | Description                                                  |
| ---------------- | ------- | ------------------------------------------------------------------ | ------------------------------------------------------------ |
| Guid             | TEXT    | Like, Not Like, Equal, Not Equal, Is Empty                         | Unique identifier for the entity in FSProtect                |
| FSName           | TEXT    | Like, Not Like, Equal, Not Equal, Is Empty                         | Display name used in FSProtect                               |
| Name             | TEXT    | Like, Not Like, Equal, Not Equal, Is Empty                         | Full resource name of the service account key                |
| KeyId            | TEXT    | Like, Not Like, Equal, Not Equal, Is Empty                         | Unique ID of the service account key                         |
| ProjectId        | TEXT    | Like, Not Like, Equal, Not Equal, Is Empty                         | GCP project the key belongs to                               |
| ServiceAccountId | TEXT    | Like, Not Like, Equal, Not Equal, Is Empty                         | ID of the service account this key is associated with        |
| KeyType          | TEXT    | Like, Not Like, Equal, Not Equal, Is Empty                         | Type of the key (e.g. USER\_MANAGED, SYSTEM\_MANAGED)        |
| KeyOrigin        | TEXT    | Like, Not Like, Equal, Not Equal, Is Empty                         | Origin of the key (e.g. GOOGLE\_PROVIDED, USER\_PROVIDED)    |
| KeyAlgorithm     | TEXT    | Like, Not Like, Equal, Not Equal, Is Empty                         | Algorithm used by the key (e.g. KEY\_ALG\_RSA\_2048)         |
| IsDisabled       | BOOLEAN | Equal, Not Equal                                                   | Whether the key is currently disabled                        |
| ValidBeforeTime  | DATE    | Smaller, Larger, Between, Equal, Is Empty                          | Expiry timestamp — the key is not valid after this time      |
| ValidAfterTime   | DATE    | Smaller, Larger, Between, Equal, Is Empty                          | Activation timestamp — the key is not valid before this time |
| GCPTier          | NUMBER  | Equal, Between, Smaller, Larger, Smaller or Equal, Larger or Equal | GCP tier classification assigned by FSProtect                |
| risk             | NUMBER  | Equal, Between, Smaller, Larger, Smaller or Equal, Larger or Equal | Risk score assigned to the entity                            |
| ExposurePoint    | NUMBER  | Equal, Between, Smaller, Larger, Smaller or Equal, Larger or Equal | Exposure point score assigned to the entity                  |