More Info:

Ensure that there are only GCP-managed service account keys for each service account.

Risk Level

High

Address

Security

Compliance Standards

CIS

Additional Reading: