Skip to content

Google Cloud API Key

Service Name: Google Cloud Platform

Service Description: Google Cloud Platform (GCP) is a suite of cloud computing services that runs on the same infrastructure that Google uses internally for its end-user products, such as Google Search, Gmail, and YouTube.

Service Address: https://cloud.google.com/

GOOGLE CLOUD API KEY

  • Validation Type: API Auth
  • IP Allow list: Does not exist
  • Secret Access Scope: Grants access to specific Google Cloud APIs based on the API key's configuration and restrictions.
  • Secret Revokement URL: https://console.cloud.google.com/apis/credentials
  • Secret Example: AIzaXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
  • Suspicious Activity Investigation Instructions:
  • Review Google Cloud Console audit logs for unusual API calls or resource access
  • Check for unexpected spikes in API usage or billing
  • Examine API key usage metrics for unauthorized or unusual patterns
  • Verify if the API key has been used from unexpected geographic locations
  • Check for any modifications to API key restrictions or permissions
  • Mitigation Instructions:
  • Immediately restrict the API key by adding IP address restrictions in the Google Cloud Console - Create a new API key with proper restrictions to replace the compromised one
  • Delete or disable the compromised API key in the Google Cloud Console
  • Update all applications and services to use the new API key
  • Implement proper API key rotation policies
  • Consider implementing additional security measures such as API quotas and monitoring