How do I ensure that my service account keys are not compromised

Question

What security measures should I follow to ensure that the private keys of my service accounts aren't compromised?

Answer 1

If you delete a key, your application will no longer be able to access Cloud Platform resources using that key.

A security best practice is to rotate your service account keys regularly. You can rotate a key by creating a new key, switching applications to use the new key and then deleting old key. 

Use the serviceAccount.keys.create()method and serviceAccount.keys.delete() method together to automate the rotation.