TLDR InfoSec · STRATEGIES & TACTICS
WHY ARE HMAC KEYS CONSIDERED UNAUDITABLE AND UNMANAGEABLE IN GOOGLE CLOUD?
Summary from the TLDR InfoSec newsletter
This blog post describes how Google Cloud HMAC keys have vulnerabilities related to logging, management, and auditing. Users can create unlimited HMAC keys without proper oversight or control. These issues could lead to security risks and challenges for administrators in Google Cloud.