cis-1.4.1-user-managed-service-keys.sh

#!/bin/bash

declare SERVICE_ACCOUNTS=$(gcloud iam service-accounts list --format="flattened(email)" | grep email | cut -d " " -f 2)

for SERVICE_ACCOUNT in $SERVICE_ACCOUNTS; do
	echo "Service Account $SERVICE_ACCOUNT"
	echo ""
	 gcloud iam service-accounts keys list --iam-account=$SERVICE_ACCOUNT --managed-by=user;
	echo ""
done;