[IAC_DRIFT_SA_KEY] Action Required: Unmanaged Service Account Keys Detected
- Dominant language
- Java
- Stars
- 8.7k
- Forks
- 4.7k
- Avg merge
- 1d 20h
- Merged PRs (30d)
- 196
Description
### Unmanaged Keys Audit Report (2026-09-14 09:15:42 UTC)
The following unauthorized or unmanaged keys were detected in `apache-beam-testing`:
- IAC_DRIFT_SA_KEY: Unmanaged key '0ff4ece11d239e06f594f72b0d8317cc47880553' detected on account 'github-self-hosted-runners@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key 'cc0b02b0da0e4c920ef387453def26a90fa9b1ea' detected on account 'github-self-hosted-runners@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '51e46c825e1730c7df3824112195b892f4664fee' detected on account 'github-self-hosted-runners@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '5abe3e33a4020047659b622807fda1466d19fcba' detected on account 'github-self-hosted-runners@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '270276cdbfbe6c6c2200aada380a9ccea43d0850' detected on account 'dannymccormick-test@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key 'c5953bb541b0e42a0ce26649ee04a8a27564d491' detected on account 'riteshghorse@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key 'ca6fc67a70a1a16b125f38ea9f716737243b786f' detected on account 'ahmedabualsaud@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '800dd067314be9bc5e829b084d22977ad08b9f0c' detected on account 'ahmedabualsaud@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key 'a7adc614afe413767e8cee8f096021d63c3bdde3' detected on account 'ml-pipelines-google-vision@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key 'a46c13edfaaa3266cb02c34de20fedefdd179f70' detected on account 'bigquery-admin@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key 'b7280ead56d02361f02f3d3e8c3e1a3d4398ba72' detected on account 'bigquery-admin@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '8c18580dabd20a4ca684a222d5726cd6530b681c' detected on account 'beam-metrics-posgresql-kube@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key 'c6c62944fae3a6e904a106a25b09f07cc93be9b6' detected on account 'beam-metrics-posgresql-kube@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key 'c6ffec5a3c396c60e12fdadb90c35de105c0e7d6' detected on account 'beam-metrics-posgresql-kube@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '289c559352a77fab15a8a890b8b46f7da98a5651' detected on account 'beam-metrics-posgresql-kube@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '4959a524c93c0790009c2af3c9876197538dad87' detected on account 'johnjcasey-gha-service-account@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key 'a473f1c0cb805f09c38a1b46fc97d8bfc95e6cf6' detected on account 'apache-beam-testing@appspot.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '1389b05acbc9150d00fbbad9b6434884c587b0e8' detected on account 'apache-beam-testing@appspot.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '130176e9d48f4d4ca59cb328f81f659a5ed38046' detected on account 'apache-beam-testing@appspot.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '5dbc9de98cd9050a26a08e0b9c082964a58a3a5c' detected on account 'apache-beam-testing@appspot.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key 'f612d9e818c906a7aedb81cac70fe4ee61899f65' detected on account 'apache-beam-testing@appspot.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key 'b28ee161fca3e79793d060ed33fbe887d64077b0' detected on account 'apache-beam-testing@appspot.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '00005a4155a35dba1150c3242f776daed45991a3' detected on account 'apache-beam-testing@appspot.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '18cfc903d7454685e6f857790e94ae1a21a6f88e' detected on account 'valentyn-test@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '61fa62f40d6bfc0476e3ce2e8af49b4aa96ba62c' detected on account 'valentyn-test@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key 'dda43c847f7df4c81aebd3c93d78d3329ee6debf' detected on account 'rehman@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '1bb0d1ccd9b13b76f584b53734213d901886abd6' detected on account 'rehman@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '9cf5eabe281d3b1743c84306087761757ebaf741' detected on account 'rehman@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key 'a284be977ad0aafe54687cb739a21ab5ad518328' detected on account 'bhulette-test@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '325ebcf7346020cf3c4725a400bfedb7f121822c' detected on account 'beam-wheels-github@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '1d1bdd47b3cae7f920ee21d687b4d79352a35845' detected on account 'beam-wheels-github@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key 'a12c6fa7729c8021fa99615f023847615a5e54ac' detected on account 'beam-wheels-github@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '907526e5da7883409574dd41d73cb949b7105bce' detected on account 'beam-wheels-github@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '6b4e9d27f26361b0a117fad37aa71cadcf51dbd8' detected on account 'beam-wheels-github@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '5d7e6bea9fab9653232dc4b6c9d79e594f04cdcd' detected on account 'beam-wheels-github@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '33631a9bae82f2d821bb1b49e185c0608975a7af' detected on account 'beam-wheels-github@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '38ce814e471d9e74085ca61b3ce61fe9b7af4332' detected on account 'beam-wheels-github@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key 'b0a2288ca80465d59471450e620916f4cfa2738c' detected on account 'travis-ci-access-to-storage@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '3afb195363cf55c4ac1e302cd705dccdde3ca3ed' detected on account 'svetaksundhar-233@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '7926e415c6cc818a3094cf2a336ddf4fef89ba67' detected on account 'dataflow-ml-starter@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '6e11a6085c4af7fd131c64b2347fe0a4169f46ad' detected on account 'dataflow-ml-starter@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key 'c690317bffadb1613a9038cf251c00bb059bee4c' detected on account 'dataflow-ml-starter@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '4f585c8c1070b4ad59b46be20fc7979641f7eaab' detected on account 'dataflow-ml-starter@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '2c5dedbd306f19efd2b0991dc55895c0bd3c3f12' detected on account 'dataflow-ml-starter@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '5a2a31a29150fd092e4b6f28a927192e72f2ec2b' detected on account 'dataflow-ml-starter@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '0633a894b90e9eda1e965b001ce274f403fcf5ca' detected on account 'dataflow-ml-starter@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key 'd0e5900c72adfe2cc701b0db7c32dbba22c02679' detected on account 'dataflow-ml-starter@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '118ab0ab5c53eb06580c692da1c3c7228fdaf0ba' detected on account 'chamikara-sa@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key 'b5ee91158ecb17371214cd708050498516e712e3' detected on account 'chamikara-sa@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '27214eff384fbb89ae7c718b7a03537cd3d60cca' detected on account 'chamikara-sa@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key 'd09dad6d550088b19f777769f8c9767b5883c45a' detected on account 'chamikara-sa@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '428a4e546638f0de0a308b84ab0a5bf7b030bef9' detected on account 'chamikara-sa@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key 'dd13534d714b07d4bce9cba85925d56907dcf180' detected on account 'chamikara-sa@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '997566c485685bc491ba55137fec8e6dbdab8b97' detected on account 'chamikara-sa@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '6d96d574be37390d87a063d6dda01dbe8067c342' detected on account 'chamikara-sa@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key 'f6ee1c16ec8ecdba186979c29a4fd79196139b22' detected on account 'chamikara-sa@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key 'eb18e2883840817185da6cdf2421aa4ec9e47d26' detected on account 'yathu-test@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key 'ff0cd4c643045c7bc4c0a86085bc2e2535cddb05' detected on account 'yathu-test@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key 'b2666e1c7971f73233e03594c13f77a0f589d48c' detected on account 'apache-beam-testing-miguelaz@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key 'ab9319a4880ddffd36f860faf21a8b2f556fdfcc' detected on account 'zyichi-test@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '912e102898d7ae7ef2c96f5fe0501b58760df182' detected on account 'zyichi-test@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '3834fbc3ae0b6a57f764c00b137a0dab82f5c3bc' detected on account 'boyuanz@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '6ce9f59631b0c4ceeaa9f6bbbe174361edf8b3fc' detected on account 'playground-deploy-cb@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '8ee9548874f63464df8b495a968a1be1c5f3d253' detected on account 'apache-beam-testing-klk@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '55518d308d6662a71140ddefc3df7d077a886806' detected on account 'apache-beam-testing-klk@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '53549be6ff4d80b901a9d607a21bd2e58f90f63b' detected on account 'apache-beam-testing-klk@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '06658be8fbb8546c8002f63d4164c3ef24738c64' detected on account 'apache-beam-testing-klk@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key 'a8d0485220585435db374bb6fecb08d9e44145d6' detected on account 'apache-beam-testing-klk@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '91f2dd3b03ec6708696f70f52b7d903b2fff015c' detected on account 'apache-beam-testing-klk@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '08c5555fe545a6c2549b0c9cf8377545ffd338cc' detected on account 'apache-beam-testing-klk@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '8df4854150aeafb322096587bffece56796e4226' detected on account 'apache-beam-testing-mikehdz@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key 'bb6e5ceb15fef880a6e8b447a809ad2bfe062546' detected on account 'bigquery-reader@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key 'a5443cd0d4fdb367a3455eef32342ac858f42b83' detected on account 'bigquery-reader@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '34a996f4185e6dba77bfa059efaab8de5528a96a' detected on account 'vitaly-terentyev@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '6ebbab479b5e3b4d68f18aed8af07d913cdce7c0' detected on account 'vitaly-terentyev@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '94b7ead2417ab1757a35e8c854f0d5ef0e67cc45' detected on account 'beam-github-actions@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '81157058227f5e080e08525ebe53aa16cd97fa91' detected on account 'beam-github-actions@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '386788165d247ae6535a97700fe9bcd7ab0517b3' detected on account 'beam-github-actions@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '4d6ed44b1fa0a79ae8502433eda888e8836aa201' detected on account 'beam-github-actions@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key 'ce0d7b8d72dfbc3c87260331e7cc2cdd88e274ee' detected on account 'beam-github-actions@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '8de7b3ecae8b3e3fcb20d391d55aa88d9431feba' detected on account 'safe-viewer@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key 'bf434c62e6b18a5d3719f68197fe9f3c23693708' detected on account 'venturedive-beamers@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '5688f91da8e3507fc3206df7aa5a761425eb0ed0' detected on account 'venturedive-beamers@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '3ddb2d32bab8dd1c666bfab2088a4d196de6a507' detected on account 'allows-impersonation@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '28d983692840cf14a1ea1826c775301319bb2d21' detected on account 'allows-impersonation@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key 'd1ff7021834e1f7568f67bad559d5ca0df42f29e' detected on account 'allows-impersonation@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key 'de6441cbeb09bd19ca15efff8321d16cf16f715f' detected on account 'gke-github-actions-test@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '914bd9afa3dbc1b0fd3644dd4394d47a99b7f4af' detected on account 'anandinguva@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '47c4c34e58c54c104ae8a471ba615a17edf443ef' detected on account 'anandinguva@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key 'e8dd94a237dc0eb0ce87fea753994d8fdb6cb926' detected on account 'anandinguva@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key 'ab3757adaf27862806a6d062261c793b9492b2e7' detected on account 'anandinguva@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '6fc72addffe7b0a2be4e58b1e0f3661ceb07e2d6' detected on account 'anandinguva@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key 'ec4c197c31dab0e7e9c02559675a5f66d0fd731a' detected on account 'anandinguva@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key 'df4b457fa5863764266566844dc28aa22692dc54' detected on account 'anandinguva@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '9fda2564019b58fecbb240813485163296457aff' detected on account 'anandinguva@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '67e9e23422b7f0d7b2e4ee623d1188e6a0c96e21' detected on account 'fuyuwei@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key 'bf6cfe1733cf1a737d8b57fc97e64e7ad3ad914c' detected on account 'vdjerek-test@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key 'eb1b6f7c4226dd19179493936fe87518970381d3' detected on account 'vdjerek-test@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '219ac0c0d0836ad2306682eff76d935a0a07d21c' detected on account 'andreydevyatkin-runner-gke-sa@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '1f0f7030358c39e1dd634dd2f66e5ea09f3df664' detected on account 'jrmccluskey@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '9b6a4874f2dafac8181e440186c4ce16d8b9183a' detected on account 'tourofbeam-cb-cd-prod@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '54ce3956e726852612fc17b180b2761328421316' detected on account 'ayush-pandey@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key 'c5c7651e2589d9453ec9b50c9082e86e7821b99a' detected on account 'beam-ai@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '0f9a7c9a9267c1623698043b686cbadd64c8b0bf' detected on account '844138762903-compute@developer.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key 'f9255c1662038a00e92e498214772e0b14d2753a' detected on account '844138762903-compute@developer.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '18331408b1edffbba27c33075c5f894830d038e6' detected on account '844138762903-compute@developer.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '0c11b9e64d21fbec083dcb3e076c0d365a9af9ef' detected on account '844138762903-compute@developer.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '02483864027b25b09e223878ea1be5a1c12baa14' detected on account '844138762903-compute@developer.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '8e111c244889da613fe1e30b17705c694f316a4e' detected on account '844138762903-compute@developer.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '16a1e08a8ee0301a747f9fb55cdfe95aa53ec1ac' detected on account '844138762903-compute@developer.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '32ce39dac12856d21571dd1c70992aa8c1c7c44d' detected on account '844138762903-compute@developer.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key 'a77edf47b766fe547c9d8accc88abf0ff419179e' detected on account '844138762903-compute@developer.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '8a6638d8b1efac914be359e236ac5068cbb22644' detected on account '844138762903-compute@developer.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '135f8d483eb014c32210b10aaca3e342ed67c8a6' detected on account 'secrets-manager-40@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '9513c1e7e182afc3306ee97f224831414a57093b' detected on account 'secrets-manager-40@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key 'e68b3aa53e56d6cbc0576ed3554db5837023db3a' detected on account 'adudko-runner-gke-sa@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '7724557f16394e9d163448ea570a64481d60cafa' detected on account 'yiru-beam-test@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '91457cd8ac2aa178db5024550896391d31cd6ab9' detected on account 'shunping-test@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '2c3b7804227d17b486fa02ca8beea9186fd1cbed' detected on account 'akarys-shorabek@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key 'd48df64be3e9b025374c528c63e23ebbf5a9d031' detected on account 'akarys-shorabek@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '0d1ad7a72bfd1bbfaed12601de739894e68938be' detected on account 'aibrahiim@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key 'e95fea8af1d0e84293e2bedec86c55b2ea80392b' detected on account 'tarun-926@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '38fb886f82f2dc00699d1be09349d0126ca54f2b' detected on account 'tarun-local-test@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
*Please investigate and revoke these keys if they are not part of the official rotation system.*
### Remediation
1. Delete all reported keys as soon as possible.
2. Replace the deleted keys using the official Beam key rotation system. It creates the service account key and registers its key ID and private key in the corresponding managed Secret Manager secret (`-key`). Do not create replacement keys manually in IAM.
3. Run the audit again to confirm that the reported keys have been removed and the replacement keys are managed by the rotation system.
For more information, consult `infra/keys/README.md`.
### History
Click to expand
### Unmanaged Keys Audit Report (2026-09-07 09:16:00 UTC)
The following unauthorized or unmanaged keys were detected in `apache-beam-testing`:
- IAC_DRIFT_SA_KEY: Unmanaged key 'cc0b02b0da0e4c920ef387453def26a90fa9b1ea' detected on account 'github-self-hosted-runners@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '5abe3e33a4020047659b622807fda1466d19fcba' detected on account 'github-self-hosted-runners@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '51e46c825e1730c7df3824112195b892f4664fee' detected on account 'github-self-hosted-runners@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '0ff4ece11d239e06f594f72b0d8317cc47880553' detected on account 'github-self-hosted-runners@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '270276cdbfbe6c6c2200aada380a9ccea43d0850' detected on account 'dannymccormick-test@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key 'c5953bb541b0e42a0ce26649ee04a8a27564d491' detected on account 'riteshghorse@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key 'ca6fc67a70a1a16b125f38ea9f716737243b786f' detected on account 'ahmedabualsaud@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '800dd067314be9bc5e829b084d22977ad08b9f0c' detected on account 'ahmedabualsaud@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key 'a7adc614afe413767e8cee8f096021d63c3bdde3' detected on account 'ml-pipelines-google-vision@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key 'b7280ead56d02361f02f3d3e8c3e1a3d4398ba72' detected on account 'bigquery-admin@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key 'a46c13edfaaa3266cb02c34de20fedefdd179f70' detected on account 'bigquery-admin@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key 'c6c62944fae3a6e904a106a25b09f07cc93be9b6' detected on account 'beam-metrics-posgresql-kube@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '289c559352a77fab15a8a890b8b46f7da98a5651' detected on account 'beam-metrics-posgresql-kube@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key 'c6ffec5a3c396c60e12fdadb90c35de105c0e7d6' detected on account 'beam-metrics-posgresql-kube@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '8c18580dabd20a4ca684a222d5726cd6530b681c' detected on account 'beam-metrics-posgresql-kube@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '4959a524c93c0790009c2af3c9876197538dad87' detected on account 'johnjcasey-gha-service-account@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key 'b28ee161fca3e79793d060ed33fbe887d64077b0' detected on account 'apache-beam-testing@appspot.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key 'a473f1c0cb805f09c38a1b46fc97d8bfc95e6cf6' detected on account 'apache-beam-testing@appspot.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '130176e9d48f4d4ca59cb328f81f659a5ed38046' detected on account 'apache-beam-testing@appspot.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '1389b05acbc9150d00fbbad9b6434884c587b0e8' detected on account 'apache-beam-testing@appspot.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '5dbc9de98cd9050a26a08e0b9c082964a58a3a5c' detected on account 'apache-beam-testing@appspot.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key 'f612d9e818c906a7aedb81cac70fe4ee61899f65' detected on account 'apache-beam-testing@appspot.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '00005a4155a35dba1150c3242f776daed45991a3' detected on account 'apache-beam-testing@appspot.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '61fa62f40d6bfc0476e3ce2e8af49b4aa96ba62c' detected on account 'valentyn-test@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '18cfc903d7454685e6f857790e94ae1a21a6f88e' detected on account 'valentyn-test@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key 'dda43c847f7df4c81aebd3c93d78d3329ee6debf' detected on account 'rehman@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '9cf5eabe281d3b1743c84306087761757ebaf741' detected on account 'rehman@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '1bb0d1ccd9b13b76f584b53734213d901886abd6' detected on account 'rehman@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key 'a284be977ad0aafe54687cb739a21ab5ad518328' detected on account 'bhulette-test@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key 'a12c6fa7729c8021fa99615f023847615a5e54ac' detected on account 'beam-wheels-github@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '1d1bdd47b3cae7f920ee21d687b4d79352a35845' detected on account 'beam-wheels-github@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '5d7e6bea9fab9653232dc4b6c9d79e594f04cdcd' detected on account 'beam-wheels-github@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '907526e5da7883409574dd41d73cb949b7105bce' detected on account 'beam-wheels-github@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '33631a9bae82f2d821bb1b49e185c0608975a7af' detected on account 'beam-wheels-github@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '325ebcf7346020cf3c4725a400bfedb7f121822c' detected on account 'beam-wheels-github@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '38ce814e471d9e74085ca61b3ce61fe9b7af4332' detected on account 'beam-wheels-github@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '6b4e9d27f26361b0a117fad37aa71cadcf51dbd8' detected on account 'beam-wheels-github@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key 'b0a2288ca80465d59471450e620916f4cfa2738c' detected on account 'travis-ci-access-to-storage@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '3afb195363cf55c4ac1e302cd705dccdde3ca3ed' detected on account 'svetaksundhar-233@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '7926e415c6cc818a3094cf2a336ddf4fef89ba67' detected on account 'dataflow-ml-starter@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '5a2a31a29150fd092e4b6f28a927192e72f2ec2b' detected on account 'dataflow-ml-starter@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key 'c690317bffadb1613a9038cf251c00bb059bee4c' detected on account 'dataflow-ml-starter@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '0633a894b90e9eda1e965b001ce274f403fcf5ca' detected on account 'dataflow-ml-starter@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '4f585c8c1070b4ad59b46be20fc7979641f7eaab' detected on account 'dataflow-ml-starter@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '2c5dedbd306f19efd2b0991dc55895c0bd3c3f12' detected on account 'dataflow-ml-starter@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '6e11a6085c4af7fd131c64b2347fe0a4169f46ad' detected on account 'dataflow-ml-starter@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key 'd0e5900c72adfe2cc701b0db7c32dbba22c02679' detected on account 'dataflow-ml-starter@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key 'b5ee91158ecb17371214cd708050498516e712e3' detected on account 'chamikara-sa@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '428a4e546638f0de0a308b84ab0a5bf7b030bef9' detected on account 'chamikara-sa@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '6d96d574be37390d87a063d6dda01dbe8067c342' detected on account 'chamikara-sa@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key 'dd13534d714b07d4bce9cba85925d56907dcf180' detected on account 'chamikara-sa@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '997566c485685bc491ba55137fec8e6dbdab8b97' detected on account 'chamikara-sa@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '27214eff384fbb89ae7c718b7a03537cd3d60cca' detected on account 'chamikara-sa@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key 'f6ee1c16ec8ecdba186979c29a4fd79196139b22' detected on account 'chamikara-sa@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key 'd09dad6d550088b19f777769f8c9767b5883c45a' detected on account 'chamikara-sa@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '118ab0ab5c53eb06580c692da1c3c7228fdaf0ba' detected on account 'chamikara-sa@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key 'ff0cd4c643045c7bc4c0a86085bc2e2535cddb05' detected on account 'yathu-test@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key 'eb18e2883840817185da6cdf2421aa4ec9e47d26' detected on account 'yathu-test@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key 'b2666e1c7971f73233e03594c13f77a0f589d48c' detected on account 'apache-beam-testing-miguelaz@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key 'ab9319a4880ddffd36f860faf21a8b2f556fdfcc' detected on account 'zyichi-test@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '912e102898d7ae7ef2c96f5fe0501b58760df182' detected on account 'zyichi-test@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '3834fbc3ae0b6a57f764c00b137a0dab82f5c3bc' detected on account 'boyuanz@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '6ce9f59631b0c4ceeaa9f6bbbe174361edf8b3fc' detected on account 'playground-deploy-cb@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '53549be6ff4d80b901a9d607a21bd2e58f90f63b' detected on account 'apache-beam-testing-klk@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key 'a8d0485220585435db374bb6fecb08d9e44145d6' detected on account 'apache-beam-testing-klk@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '08c5555fe545a6c2549b0c9cf8377545ffd338cc' detected on account 'apache-beam-testing-klk@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '8ee9548874f63464df8b495a968a1be1c5f3d253' detected on account 'apache-beam-testing-klk@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '55518d308d6662a71140ddefc3df7d077a886806' detected on account 'apache-beam-testing-klk@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '06658be8fbb8546c8002f63d4164c3ef24738c64' detected on account 'apache-beam-testing-klk@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '91f2dd3b03ec6708696f70f52b7d903b2fff015c' detected on account 'apache-beam-testing-klk@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '8df4854150aeafb322096587bffece56796e4226' detected on account 'apache-beam-testing-mikehdz@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key 'a5443cd0d4fdb367a3455eef32342ac858f42b83' detected on account 'bigquery-reader@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key 'bb6e5ceb15fef880a6e8b447a809ad2bfe062546' detected on account 'bigquery-reader@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '34a996f4185e6dba77bfa059efaab8de5528a96a' detected on account 'vitaly-terentyev@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '6ebbab479b5e3b4d68f18aed8af07d913cdce7c0' detected on account 'vitaly-terentyev@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '94b7ead2417ab1757a35e8c854f0d5ef0e67cc45' detected on account 'beam-github-actions@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key 'ce0d7b8d72dfbc3c87260331e7cc2cdd88e274ee' detected on account 'beam-github-actions@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '81157058227f5e080e08525ebe53aa16cd97fa91' detected on account 'beam-github-actions@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '4d6ed44b1fa0a79ae8502433eda888e8836aa201' detected on account 'beam-github-actions@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '386788165d247ae6535a97700fe9bcd7ab0517b3' detected on account 'beam-github-actions@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '8de7b3ecae8b3e3fcb20d391d55aa88d9431feba' detected on account 'safe-viewer@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key 'bf434c62e6b18a5d3719f68197fe9f3c23693708' detected on account 'venturedive-beamers@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '5688f91da8e3507fc3206df7aa5a761425eb0ed0' detected on account 'venturedive-beamers@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '3ddb2d32bab8dd1c666bfab2088a4d196de6a507' detected on account 'allows-impersonation@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key 'd1ff7021834e1f7568f67bad559d5ca0df42f29e' detected on account 'allows-impersonation@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '28d983692840cf14a1ea1826c775301319bb2d21' detected on account 'allows-impersonation@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key 'de6441cbeb09bd19ca15efff8321d16cf16f715f' detected on account 'gke-github-actions-test@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key 'e8dd94a237dc0eb0ce87fea753994d8fdb6cb926' detected on account 'anandinguva@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key 'df4b457fa5863764266566844dc28aa22692dc54' detected on account 'anandinguva@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '6fc72addffe7b0a2be4e58b1e0f3661ceb07e2d6' detected on account 'anandinguva@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '9fda2564019b58fecbb240813485163296457aff' detected on account 'anandinguva@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '914bd9afa3dbc1b0fd3644dd4394d47a99b7f4af' detected on account 'anandinguva@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '47c4c34e58c54c104ae8a471ba615a17edf443ef' detected on account 'anandinguva@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key 'ec4c197c31dab0e7e9c02559675a5f66d0fd731a' detected on account 'anandinguva@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key 'ab3757adaf27862806a6d062261c793b9492b2e7' detected on account 'anandinguva@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '67e9e23422b7f0d7b2e4ee623d1188e6a0c96e21' detected on account 'fuyuwei@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key 'bf6cfe1733cf1a737d8b57fc97e64e7ad3ad914c' detected on account 'vdjerek-test@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key 'eb1b6f7c4226dd19179493936fe87518970381d3' detected on account 'vdjerek-test@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '219ac0c0d0836ad2306682eff76d935a0a07d21c' detected on account 'andreydevyatkin-runner-gke-sa@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '1f0f7030358c39e1dd634dd2f66e5ea09f3df664' detected on account 'jrmccluskey@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '9b6a4874f2dafac8181e440186c4ce16d8b9183a' detected on account 'tourofbeam-cb-cd-prod@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '54ce3956e726852612fc17b180b2761328421316' detected on account 'ayush-pandey@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key 'c5c7651e2589d9453ec9b50c9082e86e7821b99a' detected on account 'beam-ai@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '0c11b9e64d21fbec083dcb3e076c0d365a9af9ef' detected on account '844138762903-compute@developer.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key 'f9255c1662038a00e92e498214772e0b14d2753a' detected on account '844138762903-compute@developer.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key 'a77edf47b766fe547c9d8accc88abf0ff419179e' detected on account '844138762903-compute@developer.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '8e111c244889da613fe1e30b17705c694f316a4e' detected on account '844138762903-compute@developer.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '02483864027b25b09e223878ea1be5a1c12baa14' detected on account '844138762903-compute@developer.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '32ce39dac12856d21571dd1c70992aa8c1c7c44d' detected on account '844138762903-compute@developer.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '8a6638d8b1efac914be359e236ac5068cbb22644' detected on account '844138762903-compute@developer.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '16a1e08a8ee0301a747f9fb55cdfe95aa53ec1ac' detected on account '844138762903-compute@developer.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '0f9a7c9a9267c1623698043b686cbadd64c8b0bf' detected on account '844138762903-compute@developer.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '18331408b1edffbba27c33075c5f894830d038e6' detected on account '844138762903-compute@developer.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '9513c1e7e182afc3306ee97f224831414a57093b' detected on account 'secrets-manager-40@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '135f8d483eb014c32210b10aaca3e342ed67c8a6' detected on account 'secrets-manager-40@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key 'e68b3aa53e56d6cbc0576ed3554db5837023db3a' detected on account 'adudko-runner-gke-sa@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '7724557f16394e9d163448ea570a64481d60cafa' detected on account 'yiru-beam-test@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '91457cd8ac2aa178db5024550896391d31cd6ab9' detected on account 'shunping-test@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '2c3b7804227d17b486fa02ca8beea9186fd1cbed' detected on account 'akarys-shorabek@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key 'd48df64be3e9b025374c528c63e23ebbf5a9d031' detected on account 'akarys-shorabek@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '0d1ad7a72bfd1bbfaed12601de739894e68938be' detected on account 'aibrahiim@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key 'e95fea8af1d0e84293e2bedec86c55b2ea80392b' detected on account 'tarun-926@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '38fb886f82f2dc00699d1be09349d0126ca54f2b' detected on account 'tarun-local-test@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
*Please investigate and revoke these keys if they are not part of the official rotation system.*
### Remediation
1. Delete all reported keys as soon as possible.
2. Replace the deleted keys using the official Beam key rotation system. It creates the service account key and registers its key ID and private key in the corresponding managed Secret Manager secret (`-key`). Do not create replacement keys manually in IAM.
3. Run the audit again to confirm that the reported keys have been removed and the replacement keys are managed by the rotation system.
For more information, consult `infra/keys/README.md`.
---
### Unmanaged Keys Audit Report (2026-08-31 09:16:22 UTC)
The following unauthorized or unmanaged keys were detected in `apache-beam-testing`:
- IAC_DRIFT_SA_KEY: Unmanaged key '51e46c825e1730c7df3824112195b892f4664fee' detected on account 'github-self-hosted-runners@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key 'cc0b02b0da0e4c920ef387453def26a90fa9b1ea' detected on account 'github-self-hosted-runners@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '5abe3e33a4020047659b622807fda1466d19fcba' detected on account 'github-self-hosted-runners@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '0ff4ece11d239e06f594f72b0d8317cc47880553' detected on account 'github-self-hosted-runners@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '270276cdbfbe6c6c2200aada380a9ccea43d0850' detected on account 'dannymccormick-test@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key 'c5953bb541b0e42a0ce26649ee04a8a27564d491' detected on account 'riteshghorse@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '800dd067314be9bc5e829b084d22977ad08b9f0c' detected on account 'ahmedabualsaud@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key 'ca6fc67a70a1a16b125f38ea9f716737243b786f' detected on account 'ahmedabualsaud@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key 'a7adc614afe413767e8cee8f096021d63c3bdde3' detected on account 'ml-pipelines-google-vision@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key 'b7280ead56d02361f02f3d3e8c3e1a3d4398ba72' detected on account 'bigquery-admin@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key 'a46c13edfaaa3266cb02c34de20fedefdd179f70' detected on account 'bigquery-admin@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '8c18580dabd20a4ca684a222d5726cd6530b681c' detected on account 'beam-metrics-posgresql-kube@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key 'c6ffec5a3c396c60e12fdadb90c35de105c0e7d6' detected on account 'beam-metrics-posgresql-kube@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key 'c6c62944fae3a6e904a106a25b09f07cc93be9b6' detected on account 'beam-metrics-posgresql-kube@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '289c559352a77fab15a8a890b8b46f7da98a5651' detected on account 'beam-metrics-posgresql-kube@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '4959a524c93c0790009c2af3c9876197538dad87' detected on account 'johnjcasey-gha-service-account@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '5dbc9de98cd9050a26a08e0b9c082964a58a3a5c' detected on account 'apache-beam-testing@appspot.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key 'f612d9e818c906a7aedb81cac70fe4ee61899f65' detected on account 'apache-beam-testing@appspot.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '00005a4155a35dba1150c3242f776daed45991a3' detected on account 'apache-beam-testing@appspot.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key 'a473f1c0cb805f09c38a1b46fc97d8bfc95e6cf6' detected on account 'apache-beam-testing@appspot.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '130176e9d48f4d4ca59cb328f81f659a5ed38046' detected on account 'apache-beam-testing@appspot.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '1389b05acbc9150d00fbbad9b6434884c587b0e8' detected on account 'apache-beam-testing@appspot.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key 'b28ee161fca3e79793d060ed33fbe887d64077b0' detected on account 'apache-beam-testing@appspot.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '18cfc903d7454685e6f857790e94ae1a21a6f88e' detected on account 'valentyn-test@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '61fa62f40d6bfc0476e3ce2e8af49b4aa96ba62c' detected on account 'valentyn-test@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '1bb0d1ccd9b13b76f584b53734213d901886abd6' detected on account 'rehman@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '9cf5eabe281d3b1743c84306087761757ebaf741' detected on account 'rehman@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key 'dda43c847f7df4c81aebd3c93d78d3329ee6debf' detected on account 'rehman@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key 'a284be977ad0aafe54687cb739a21ab5ad518328' detected on account 'bhulette-test@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key 'a12c6fa7729c8021fa99615f023847615a5e54ac' detected on account 'beam-wheels-github@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '5d7e6bea9fab9653232dc4b6c9d79e594f04cdcd' detected on account 'beam-wheels-github@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '38ce814e471d9e74085ca61b3ce61fe9b7af4332' detected on account 'beam-wheels-github@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '325ebcf7346020cf3c4725a400bfedb7f121822c' detected on account 'beam-wheels-github@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '6b4e9d27f26361b0a117fad37aa71cadcf51dbd8' detected on account 'beam-wheels-github@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '907526e5da7883409574dd41d73cb949b7105bce' detected on account 'beam-wheels-github@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '33631a9bae82f2d821bb1b49e185c0608975a7af' detected on account 'beam-wheels-github@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '1d1bdd47b3cae7f920ee21d687b4d79352a35845' detected on account 'beam-wheels-github@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key 'b0a2288ca80465d59471450e620916f4cfa2738c' detected on account 'travis-ci-access-to-storage@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '3afb195363cf55c4ac1e302cd705dccdde3ca3ed' detected on account 'svetaksundhar-233@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '4f585c8c1070b4ad59b46be20fc7979641f7eaab' detected on account 'dataflow-ml-starter@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key 'c690317bffadb1613a9038cf251c00bb059bee4c' detected on account 'dataflow-ml-starter@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '0633a894b90e9eda1e965b001ce274f403fcf5ca' detected on account 'dataflow-ml-starter@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key 'd0e5900c72adfe2cc701b0db7c32dbba22c02679' detected on account 'dataflow-ml-starter@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '6e11a6085c4af7fd131c64b2347fe0a4169f46ad' detected on account 'dataflow-ml-starter@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '2c5dedbd306f19efd2b0991dc55895c0bd3c3f12' detected on account 'dataflow-ml-starter@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '5a2a31a29150fd092e4b6f28a927192e72f2ec2b' detected on account 'dataflow-ml-starter@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '7926e415c6cc818a3094cf2a336ddf4fef89ba67' detected on account 'dataflow-ml-starter@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '118ab0ab5c53eb06580c692da1c3c7228fdaf0ba' detected on account 'chamikara-sa@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key 'd09dad6d550088b19f777769f8c9767b5883c45a' detected on account 'chamikara-sa@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key 'dd13534d714b07d4bce9cba85925d56907dcf180' detected on account 'chamikara-sa@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key 'f6ee1c16ec8ecdba186979c29a4fd79196139b22' detected on account 'chamikara-sa@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '27214eff384fbb89ae7c718b7a03537cd3d60cca' detected on account 'chamikara-sa@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key 'b5ee91158ecb17371214cd708050498516e712e3' detected on account 'chamikara-sa@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '428a4e546638f0de0a308b84ab0a5bf7b030bef9' detected on account 'chamikara-sa@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '6d96d574be37390d87a063d6dda01dbe8067c342' detected on account 'chamikara-sa@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '997566c485685bc491ba55137fec8e6dbdab8b97' detected on account 'chamikara-sa@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key 'ff0cd4c643045c7bc4c0a86085bc2e2535cddb05' detected on account 'yathu-test@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key 'eb18e2883840817185da6cdf2421aa4ec9e47d26' detected on account 'yathu-test@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key 'b2666e1c7971f73233e03594c13f77a0f589d48c' detected on account 'apache-beam-testing-miguelaz@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '912e102898d7ae7ef2c96f5fe0501b58760df182' detected on account 'zyichi-test@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key 'ab9319a4880ddffd36f860faf21a8b2f556fdfcc' detected on account 'zyichi-test@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '3834fbc3ae0b6a57f764c00b137a0dab82f5c3bc' detected on account 'boyuanz@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '6ce9f59631b0c4ceeaa9f6bbbe174361edf8b3fc' detected on account 'playground-deploy-cb@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '06658be8fbb8546c8002f63d4164c3ef24738c64' detected on account 'apache-beam-testing-klk@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '55518d308d6662a71140ddefc3df7d077a886806' detected on account 'apache-beam-testing-klk@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '08c5555fe545a6c2549b0c9cf8377545ffd338cc' detected on account 'apache-beam-testing-klk@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '91f2dd3b03ec6708696f70f52b7d903b2fff015c' detected on account 'apache-beam-testing-klk@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key 'a8d0485220585435db374bb6fecb08d9e44145d6' detected on account 'apache-beam-testing-klk@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '8ee9548874f63464df8b495a968a1be1c5f3d253' detected on account 'apache-beam-testing-klk@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '53549be6ff4d80b901a9d607a21bd2e58f90f63b' detected on account 'apache-beam-testing-klk@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '8df4854150aeafb322096587bffece56796e4226' detected on account 'apache-beam-testing-mikehdz@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key 'a5443cd0d4fdb367a3455eef32342ac858f42b83' detected on account 'bigquery-reader@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key 'bb6e5ceb15fef880a6e8b447a809ad2bfe062546' detected on account 'bigquery-reader@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '6ebbab479b5e3b4d68f18aed8af07d913cdce7c0' detected on account 'vitaly-terentyev@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '34a996f4185e6dba77bfa059efaab8de5528a96a' detected on account 'vitaly-terentyev@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key 'ce0d7b8d72dfbc3c87260331e7cc2cdd88e274ee' detected on account 'beam-github-actions@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '94b7ead2417ab1757a35e8c854f0d5ef0e67cc45' detected on account 'beam-github-actions@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '81157058227f5e080e08525ebe53aa16cd97fa91' detected on account 'beam-github-actions@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '4d6ed44b1fa0a79ae8502433eda888e8836aa201' detected on account 'beam-github-actions@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '386788165d247ae6535a97700fe9bcd7ab0517b3' detected on account 'beam-github-actions@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '8de7b3ecae8b3e3fcb20d391d55aa88d9431feba' detected on account 'safe-viewer@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '5688f91da8e3507fc3206df7aa5a761425eb0ed0' detected on account 'venturedive-beamers@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key 'bf434c62e6b18a5d3719f68197fe9f3c23693708' detected on account 'venturedive-beamers@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '28d983692840cf14a1ea1826c775301319bb2d21' detected on account 'allows-impersonation@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key 'd1ff7021834e1f7568f67bad559d5ca0df42f29e' detected on account 'allows-impersonation@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '3ddb2d32bab8dd1c666bfab2088a4d196de6a507' detected on account 'allows-impersonation@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key 'de6441cbeb09bd19ca15efff8321d16cf16f715f' detected on account 'gke-github-actions-test@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key 'ab3757adaf27862806a6d062261c793b9492b2e7' detected on account 'anandinguva@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key 'df4b457fa5863764266566844dc28aa22692dc54' detected on account 'anandinguva@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '6fc72addffe7b0a2be4e58b1e0f3661ceb07e2d6' detected on account 'anandinguva@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key 'ec4c197c31dab0e7e9c02559675a5f66d0fd731a' detected on account 'anandinguva@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '47c4c34e58c54c104ae8a471ba615a17edf443ef' detected on account 'anandinguva@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '9fda2564019b58fecbb240813485163296457aff' detected on account 'anandinguva@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key 'e8dd94a237dc0eb0ce87fea753994d8fdb6cb926' detected on account 'anandinguva@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '914bd9afa3dbc1b0fd3644dd4394d47a99b7f4af' detected on account 'anandinguva@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '67e9e23422b7f0d7b2e4ee623d1188e6a0c96e21' detected on account 'fuyuwei@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key 'eb1b6f7c4226dd19179493936fe87518970381d3' detected on account 'vdjerek-test@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key 'bf6cfe1733cf1a737d8b57fc97e64e7ad3ad914c' detected on account 'vdjerek-test@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '219ac0c0d0836ad2306682eff76d935a0a07d21c' detected on account 'andreydevyatkin-runner-gke-sa@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '1f0f7030358c39e1dd634dd2f66e5ea09f3df664' detected on account 'jrmccluskey@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '9b6a4874f2dafac8181e440186c4ce16d8b9183a' detected on account 'tourofbeam-cb-cd-prod@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '54ce3956e726852612fc17b180b2761328421316' detected on account 'ayush-pandey@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key 'c5c7651e2589d9453ec9b50c9082e86e7821b99a' detected on account 'beam-ai@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key 'f9255c1662038a00e92e498214772e0b14d2753a' detected on account '844138762903-compute@developer.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '32ce39dac12856d21571dd1c70992aa8c1c7c44d' detected on account '844138762903-compute@developer.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '0f9a7c9a9267c1623698043b686cbadd64c8b0bf' detected on account '844138762903-compute@developer.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '8a6638d8b1efac914be359e236ac5068cbb22644' detected on account '844138762903-compute@developer.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '18331408b1edffbba27c33075c5f894830d038e6' detected on account '844138762903-compute@developer.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key 'a77edf47b766fe547c9d8accc88abf0ff419179e' detected on account '844138762903-compute@developer.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '0c11b9e64d21fbec083dcb3e076c0d365a9af9ef' detected on account '844138762903-compute@developer.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '16a1e08a8ee0301a747f9fb55cdfe95aa53ec1ac' detected on account '844138762903-compute@developer.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '8e111c244889da613fe1e30b17705c694f316a4e' detected on account '844138762903-compute@developer.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '02483864027b25b09e223878ea1be5a1c12baa14' detected on account '844138762903-compute@developer.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '135f8d483eb014c32210b10aaca3e342ed67c8a6' detected on account 'secrets-manager-40@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '9513c1e7e182afc3306ee97f224831414a57093b' detected on account 'secrets-manager-40@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key 'e68b3aa53e56d6cbc0576ed3554db5837023db3a' detected on account 'adudko-runner-gke-sa@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '7724557f16394e9d163448ea570a64481d60cafa' detected on account 'yiru-beam-test@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '91457cd8ac2aa178db5024550896391d31cd6ab9' detected on account 'shunping-test@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key 'd48df64be3e9b025374c528c63e23ebbf5a9d031' detected on account 'akarys-shorabek@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '2c3b7804227d17b486fa02ca8beea9186fd1cbed' detected on account 'akarys-shorabek@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '0d1ad7a72bfd1bbfaed12601de739894e68938be' detected on account 'aibrahiim@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key 'e95fea8af1d0e84293e2bedec86c55b2ea80392b' detected on account 'tarun-926@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
- IAC_DRIFT_SA_KEY: Unmanaged key '38fb886f82f2dc00699d1be09349d0126ca54f2b' detected on account 'tarun-local-test@apache-beam-testing.iam.gserviceaccount.com'. This key was created outside of Beam's service account management system.
*Please investigate and revoke these keys if they are not part of the official rotation system.*
### Remediation
1. Delete all reported keys as soon as possible.
2. Replace the deleted keys using the official Beam key rotation system. It creates the service account key and registers its key ID and private key in the corresponding managed Secret Manager secret (`-key`). Do not create replacement keys manually in IAM.
3. Run the audit again to confirm that the reported keys have been removed and the replacement keys are managed by the rotation system.
For more information, consult `infra/keys/README.md`.
Contributor guide
Research direction
The report names unmanaged service-account keys in the apache-beam-testing project but no repository files, tests, or implementation entry point. First determine how Beam's service-account management represents expected keys and how these accounts are administered. Done means establishing the intended remediation for every listed key and confirming that unmanaged keys no longer remain.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- gcp
- Domain
- cloud, infrastructure, security
- Issue type
- Bug
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Active
- Clarity
- Needs clarification
- Newbie friendliness
- 20/100