← IAM & Service Accounts437 / 640

hardgcloud

Sign a binary blob using a service account to produce a cryptographic signature

command

gcloud iam service-accounts sign-blob --iam-account SA_EMAIL INPUT_FILE OUTPUT_FILE

also accepted

gcloud iam service-accounts sign-blob

Command breakdown

Part of the Google Cloud CLI (gcloud) — IAM & Service Accounts category.

gcloudiamservice-accountssign-blob--iam-accountSA_EMAILINPUT_FILEOUTPUT_FILE

Flag	Purpose
`--iam-account`	Boolean flag

More IAM & Service Accounts commands

Create a new IAM service account in the current projectgcloud iam service-accounts create SA_NAME --display-name DISPLAY_NAME
List all service accounts in the current projectgcloud iam service-accounts list
Generate and download a new JSON key file for a service accountgcloud iam service-accounts keys create KEY_FILE --iam-account SA_EMAIL
Grant an IAM role to a member on a specific projectgcloud projects add-iam-policy-binding PROJECT_ID --member MEMBER --role ROLE
Retrieve the full IAM policy (all role bindings) for a projectgcloud projects get-iam-policy PROJECT_ID
List all predefined and custom IAM roles available in the projectgcloud iam roles list
Delete a service account and revoke all its associated credentialsgcloud iam service-accounts delete SA_EMAIL
Show details including display name and unique ID for a service accountgcloud iam service-accounts describe SA_EMAIL

See all IAM & Service Accounts commands →

← prev next →

More IAM & Service Accounts commands →Full cheat sheet →

Test your recall — not just your reading.

Practice with interactive quiz →