publicly exposed key

[dirkschut]

Google sent out an email a couple of days ago that they will start disabling keys that are on public GitHub repos (specifically Service Account Keys). I don't know if the default key for YouCast is one of them, but if so, you might want to set the IAM.serviceAccountKeyEposureResponse constraint to WAIT_FOR_ABUSE.

Relevant links:

• reddit thread
• google cloud resources

[qtlin]

YouCast key has been disabled and dormant for many years, as far as I know. Every user must request and install own key so above is not an issue at all.