GCP generateAccessToken
Requests a short-lived OAuth access token for a service account.
T1548.005: Temporary Elevated Cloud Access
T1548.005: Temporary Elevated Cloud Access
Adversaries may abuse permission configurations that allow them to gain temporarily elevated access to cloud resources. Many cloud environments allow administrators to grant user or service accounts permission to request just-in-time access to roles, impersonate other accounts, pass roles onto re...
View on MITRE ATT&CK →GCP iam.serviceAccounts.actAs
Records permission to attach a service account to a resource.
GCP iam.serviceAccounts.implicitDelegation
Identifies delegated service-account token generation.
GCP iam.serviceAccounts.signJwt
Signs a JWT using a service account’s Google-managed key.