← IAM & Service Accounts432 / 640

hardgcloud

Revoke and delete a specific service account key by its ID

command

gcloud iam service-accounts keys delete KEY_ID --iam-account SA_EMAIL

also accepted

gcloud iam service-accounts keys delete

Command breakdown

Part of the Google Cloud CLI (gcloud) — IAM & Service Accounts category.

gcloudiamservice-accountskeysdeleteKEY_ID--iam-accountSA_EMAIL

Flag	Purpose
`--iam-account`	Boolean flag

More IAM & Service Accounts commands

Create a new IAM service account in the current projectgcloud iam service-accounts create SA_NAME --display-name DISPLAY_NAME
List all service accounts in the current projectgcloud iam service-accounts list
Generate and download a new JSON key file for a service accountgcloud iam service-accounts keys create KEY_FILE --iam-account SA_EMAIL
Grant an IAM role to a member on a specific projectgcloud projects add-iam-policy-binding PROJECT_ID --member MEMBER --role ROLE
Retrieve the full IAM policy (all role bindings) for a projectgcloud projects get-iam-policy PROJECT_ID
List all predefined and custom IAM roles available in the projectgcloud iam roles list
Delete a service account and revoke all its associated credentialsgcloud iam service-accounts delete SA_EMAIL
Show details including display name and unique ID for a service accountgcloud iam service-accounts describe SA_EMAIL

See all IAM & Service Accounts commands →

← prev next →

More IAM & Service Accounts commands →Full cheat sheet →

Test your recall — not just your reading.

Practice with interactive quiz →