TLDR InfoSec · STRATEGIES & TACTICS

WHY ARE HMAC KEYS CONSIDERED UNAUDITABLE AND UNMANAGEABLE IN GOOGLE CLOUD?

vectra.ai6 min read

Summary from the TLDR InfoSec newsletter

This blog post describes how Google Cloud HMAC keys have vulnerabilities related to logging, management, and auditing. Users can create unlimited HMAC keys without proper oversight or control. These issues could lead to security risks and challenges for administrators in Google Cloud.