GCP Security Command Center - Detect Open/Unrestricted API Keys

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

Back to Content Index


Detects Google Cloud projects that have API keys with unrestricted API access using Security Command Center API_KEY_APIS_UNRESTRICTED findings. These findings indicate API keys that are not restricted to specific APIs and may allow broader access than intended.

Attribute Value
Type Analytic Rule
Solution Google Cloud Platform Security Command Center
ID d8e30113-373a-4f49-a0ad-1a5d8b95b729
Severity Medium
Status Available
Kind Scheduled
Tactics InitialAccess, CredentialAccess
Techniques T1190, T1552
Required Connectors GoogleSCCDefinition
Source View on GitHub

Tables Used

This content item queries data from the following tables:

Table Transformations Ingestion API Lake-Only
GoogleCloudSCC ?

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

Back to Analytic Rules · Back to Google Cloud Platform Security Command Center