---
title: Google Cloud Service Account key created
description: Datadog, the leading service for cloud-scale monitoring.
breadcrumbs: >-
  Docs > Datadog Security > OOTB Rules > Google Cloud Service Account key
  created
---

# Google Cloud Service Account key created
Classification:attackTactic:[TA0003-persistence](https://attack.mitre.org/tactics/TA0003)Technique:[T1098-account-manipulation](https://attack.mitre.org/techniques/T1098) 
## Goal{% #goal %}

Detect when a new service account key is created. An attacker could use this key as a backdoor to your account.

## Strategy{% #strategy %}

This rule lets you monitor Google Cloud Admin activity audit logs to detect the creation of a service account key.

## Triage and response{% #triage-and-response %}

Contact the user who created the service account key to ensure they're managing the key securely.

## Changelog{% #changelog %}

31 January 2023 - Updated tags.