Skip to content

[IAC_DRIFT_SA_KEY] Action Required: Unmanaged Service Account Keys Detected #39932

Description

@github-actions

Unmanaged Keys Audit Report (2026-08-31 09:16:22 UTC)

The following unauthorized or unmanaged keys were detected in apache-beam-testing:

Please investigate and revoke these keys if they are not part of the official rotation system.

Remediation

  1. Delete all reported keys as soon as possible.
  2. Replace the deleted keys using the official Beam key rotation system. It creates the service account key and registers its key ID and private key in the corresponding managed Secret Manager secret (<service-account-id>-key). Do not create replacement keys manually in IAM.
  3. Run the audit again to confirm that the reported keys have been removed and the replacement keys are managed by the rotation system.

For more information, consult infra/keys/README.md.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions