Update template info block and tags

- Update name to follow standard format
- Adjust severity from critical to high
- Add iam tag
- Add metadata with max-request field
This commit is contained in:
Prince Chaddha
2026-01-03 09:58:07 +05:30
parent 704db5f875
commit 99203cd594

View File

@@ -1,9 +1,9 @@
id: gcloud-service-account-keys-rotation
info:
name: Service Account Keys without rotation Found
name: GCP Service Account Keys - No Rotation Configured
author: kelu27
severity: critical
severity: high
description: |
Detects Google Cloud Platform (GCP) service account keys that have no rotation enabled.
Keys with an expiration date of 9999-12-31T23:59:59 are considered non-rotating and pose security risks if compromised.
@@ -15,7 +15,9 @@ info:
- https://cloud.google.com/iam/docs/understanding-service-accounts
- https://cloud.google.com/iam/docs/best-practices-for-securing-service-accounts
- https://cloud.google.com/iam/docs/key-rotation
tags: cloud,devops,gcp,gcloud,google-cloud-iam,gcp-cloud-config,security,rotation
metadata:
max-request: 3
tags: cloud,devops,gcp,gcloud,iam,google-cloud-iam,gcp-cloud-config,security,rotation
flow: |
code(1)