gcp-iam v5.25.0 - Disable service account keys that aren't allowed

Nov 12, 2026•GuardrailsMods

What's new?

  • Service account keys that aren't allowed can now be disabled, so they can be enabled again later, as well as deleted. GCP > IAM > Service Account Key > Allowed > Custom adds Enforce: Disable if not allowed; the delete values and the default are unchanged. The new GCP > IAM > Service Account Key > Disable action needs the iam.serviceAccountKeys.disable permission.

Action Types

Added

  • GCP > IAM > Service Account Key > Disable