gcloud alpha iam service-accounts keys disable - disable a public key related to an IAM service account
gcloud alpha iam service-accounts keys disable (IAM_KEY : --iam-account=IAM_ACCOUNT) [GCLOUD_WIDE_FLAG ...]
(ALPHA) Disable a public key related to an IAM service account.
If the service account does not exist, this command returns a PERMISSION_DENIED error.
To disable a key with ID b4f1037aeef9ab37deee9 for the service account my-iam-account@my-project.iam.gserviceaccount.com, run:
gcloud alpha iam service-accounts keys disable b4f1037aeef9ab37deee9 --iam-account=my-iam-account@my-project.iam.gserviceaccount.com
- IamKey resource - The id of the key to disable. The arguments in this group can
be used to specify the attributes of this resource. (NOTE) Some attributes are not given arguments in this group but can be set in other ways. To set the project attribute:
- —
provide the argument iam_key on the command line with a fully specified name;
- —
set the property core/project;
- —
provide the argument --project on the command line.
This must be specified.
- IAM_KEY
ID of the iamKey or fully qualified identifier for the iamKey. To set the iam_key attribute:
provide the argument iam_key on the command line.
This positional argument must be specified if any of the other arguments in this group are specified.
- --iam-account=IAM_ACCOUNT
The name of the IAM ServiceAccount.
To set the iam-account attribute:
provide the argument iam_key on the command line with a fully specified name;
provide the argument --iam-account on the command line.
These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, --help, --impersonate-service-account, --log-http, --project, --quiet, --trace-token, --user-output-enabled, --verbosity.
Run $ gcloud help for details.
This command uses the iam/v1 API. The full documentation for this API can be found at: https://cloud.google.com/iam/
This command is currently in alpha and might change without notice. If this command fails with API permission errors despite specifying the correct project, you might be trying to access an API with an invitation-only early access allowlist. These variants are also available:
$ gcloud iam service-accounts keys disable
$ gcloud beta iam service-accounts keys disable