gcp.iam.service_account_key.delete

Delete a GCP service-account key

Deletes a GCP service-account key (iam.serviceAccounts.keys.delete). Companion to the create workflow — enables rotation and cleanup so long-lived keys don't accumulate. Idempotent: a missing key (NOT_FOUND) reports deleted=False without raising.

Inputs:

• connection_uuid: Cloud connection UUID (required)
• account_email: Full SA email owning the key (required)
• key_name: Full key resource name (.../keys/{id}). Provide this OR key_id.
• key_id: Key id (alternative to key_name).
• project_id: Explicit project_id (optional; defaults to connection)

Outputs:

• deleted: True if a key was deleted, False if already absent (idempotent).
• key_name
• account_email

Overview

Property	Value
Workflow type	Atomic
Library	Base-gcp
Version	1.0

Input Schema

Field	Type	Required	Default	Description
connection_uuid	uuid	Yes	—	—
account_email	string	Yes	—	—
key_name	string	No	—	Full key resource name (.../keys/{id}). Provide this OR key_id.
key_id	string	No	—	Key id (alternative to key_name).
project_id	string	No	—	—

Output Schema

Field	Type	Required	Default	Description
deleted	boolean	No	—	True if a key was deleted, False if already absent (idempotent).
key_name	string	No	—	—
account_email	string	No	—	—
project_id	string	No	—	—
connection_uuid	uuid	No	—	—
key_id	string	No	—	—
failure_reason	string	No	—	—
failure_type	string	No	—	—
failed_action	string	No	—	—
failed_at_state	string	No	—	—
failed_step	string	No	—	—
failed_layer	string	No	—	—
error	string	No	—	—
error_type	string	No	—	—

States

State	Initial	Terminal	Success	Auto-advance	Description
pending	Yes	No	—	execute	—
completed	No	Yes	Yes	—	—
failed	No	Yes	No	—	—

State Diagram

Transitions

From	Action	To	Description
pending	execute	completed	—
* (any state)	fail	failed	—

API Usage

POST /api/workflows/start
Content-Type: application/json

{
  "workflow_type": "gcp.iam.service_account_key.delete",
  "initial_data": {
    "connection_uuid": "value",
    "account_email": "value"
  }
}