You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
fix: properly describe service GCP service account keys rotation (#35)
The procedure previously described explains how to rotate GCP service account keys, not API keys (which are another way to authenticate to _some_ Google Cloud APIs).
In this commit, I'm updating the terminology to reflect this fact.
Copy file name to clipboardExpand all lines: content/docs/tutorials/gcp.md
+11-11Lines changed: 11 additions & 11 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -2,10 +2,10 @@
2
2
title: GCP
3
3
---
4
4
5
-
*This tutorial provides step-by-step instructions on how to rotate a Google Cloud Platform (GCP) API key.*
5
+
*This tutorial provides step-by-step instructions on how to rotate a Google Cloud Platform (GCP) Service Account key.*
6
6
7
7
---
8
-
## Generate a new GCP API Key
8
+
## Generate a new GCP Service Account Key
9
9
10
10
### Step 1 - Navigate to the relevant Service Account page
11
11
#### 1a. Navigate to the impacted GCP project
@@ -19,12 +19,12 @@ In the `IAM & Admin` tab dropdown, click on `Service Accounts` to view your exis
19
19
20
20

21
21
22
-
Click on the service account you want to create the API key for.
22
+
Click on the service account you want to create the Service Account key for.
23
23
24
24

25
25
26
26
27
-
### Step 2 - Generate a new GCP API key
27
+
### Step 2 - Generate a new GCP Service Account key
28
28
29
29
#### 2a. Create a new key
30
30
Click on the `Keys` tab. Click on the `Add Key` button and then select `Create new key`.
@@ -33,16 +33,16 @@ Click on the `Keys` tab. Click on the `Add Key` button and then select `Create n
33
33
Choose the key type (`JSON` or `P12`) and click `Create`.
34
34

35
35
#### 2c. New key automatically downloads to your computer
36
-
The new API key will be downloaded to your computer. Make sure to store it in a secure location.
36
+
The new Service Account key will be downloaded to your computer. Make sure to store it in a secure location.
37
37

38
38
39
39
---
40
-
## Replace the Leaked GCP API Key
40
+
## Replace the Leaked GCP Service Account Key
41
41
42
-
Replace the leaked GCP API Key with the new one in all impacted applications and services.
42
+
Replace the leaked GCP Service Account Key with the new one in all impacted applications and services.
43
43
44
44
---
45
-
## Revoke the Leaked GCP API Key
45
+
## Revoke the Leaked GCP Service Account Key
46
46
47
47
#### *Note: deleting the project that contains the key, does not ensure swift deactivation of that key. GCP services and traffic can remain active up to 30 days after scheduling a project for deletion*
48
48
@@ -58,13 +58,13 @@ In the `IAM & Admin` tab dropdown, click on `Service Accounts` to view your exis
58
58
59
59

60
60
61
-
Click on the service account you want to revoke the API key for.
61
+
Click on the service account you want to revoke the Service Account key for.
62
62
63
63

64
64
65
65
66
66
67
-
### Step 2 - Revoke the leaked GCP API key
67
+
### Step 2 - Revoke the leaked GCP Service Account key
68
68
69
69
#### 2a. Delete the relevant key
70
70
Click on the `Keys` tab. Click on the `Delete` icon at the end of the row of the key you want to delete.
@@ -77,4 +77,4 @@ A message will pop up informing you that the key has been deleted.
77
77
78
78
---
79
79
## Resources
80
-
-[GCP API Key Documentation](https://cloud.google.com/docs/authentication/api-keys#introduction)
80
+
-[GCP Service Account Key Documentation](https://cloud.google.com/iam/docs/keys-create-delete)
0 commit comments