IAM

Abusable GCP IAM permissions that can lead to compromise or privilege escalation

iam.serviceAccounts.getAccessToken

• With access to these permissions, an attacker can impersonate a target Service Account, escalating their privileges.

gcloud config set auth/impersonate_service_account <service-acct-name>@<gcp-project-id>.iam.gserviceaccount.com 

---