Skip to main content

GCP Iam Service Account

A GCP IAM Service Account is a special kind of Google Cloud identity that belongs to your application or a virtual machine rather than to an individual end-user. It can be granted IAM roles, possess its own set of credentials (keys), and is used to authenticate workloads when they call Google Cloud APIs. See the official documentation for more details: https://cloud.google.com/iam/docs/service-accounts

Terrafrom Mappings:

  • google_service_account.email
  • google_service_account.unique_id

Supported Methods​

  • GET: Get GCP Iam Service Account by "gcp-iam-service-account-email or unique_id"
  • LIST: List all GCP Iam Service Account items
  • SEARCH

Possible Links​

gcp-cloud-resource-manager-project​

Every service account is created within, and therefore owned by, a specific Cloud project. The link allows Overmind to trace a service account back to its parent project, helping you understand project-level dependencies and assess the blast radius of permission or key changes.