From c7458d94aa6498e60c0b1621af5617ede628ab8d Mon Sep 17 00:00:00 2001 From: x032205 Date: Thu, 12 Jun 2025 15:45:30 -0400 Subject: [PATCH] Warning about tokens --- docs/documentation/platform/dynamic-secrets/gcp-iam.mdx | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/docs/documentation/platform/dynamic-secrets/gcp-iam.mdx b/docs/documentation/platform/dynamic-secrets/gcp-iam.mdx index 3e48f08ea..406021fa8 100644 --- a/docs/documentation/platform/dynamic-secrets/gcp-iam.mdx +++ b/docs/documentation/platform/dynamic-secrets/gcp-iam.mdx @@ -5,6 +5,10 @@ description: "Learn how to dynamically generate GCP service account tokens." The Infisical GCP IAM dynamic secret allows you to generate GCP service account tokens on demand based on service account permissions. + + GCP service account access tokens cannot be revoked. As such, revoking or regenerating a token does not invalidate the old one; it remains active until it expires. + + You must enable the [IAM API](https://console.cloud.google.com/apis/library/iam.googleapis.com) and [IAM Credentials API](https://console.cloud.google.com/apis/library/iamcredentials.googleapis.com) in your GCP console as a prerequisite