Find out last activity of Service Account Key in GCP IAM

Question

Is it possible to know the last activity of service account's key in GCP IAM, similar to AWS IAM's GetAccessKeyLastUsed? I was avoiding the option of monitoring the activity from GCP Stackdriver.

Answer 1

You can use Cloud Monitoring metrics [1] to monitor service account or service account key usage.

You can identify unused service accounts and keys by [2].

[1] https://cloud.google.com/iam/docs/service-account-monitoring
[2] https://cloud.google.com/iam/docs/service-account-monitoring#identify-unused