Skip to main content

Scan GCP Secret Manager, Certificate Manager, and Compute Engine SSL certificates

POST 
/api/v1/integrations/gcp/scan

Lists Secret Manager secrets when include.secrets is true (the default) and, when include.certificates is true, Certificate Manager certificates at locations/global plus Compute Engine sslCertificates (global and every reachable region). Paste a short-lived gcloud auth print-access-token value, not a service-account JSON key. Roles on a service account apply only if that account is impersonated. A failed sub-scan names the Google reason (API not enabled, missing permission, or wrong identity) instead of a bare HTTP 403. Incomplete certificate kinds are reported incomplete so obsolete-item cleanup cannot delete tokens the scan never fully enumerated.

Request​

Responses​

Integration scan result