You need to create and manage service accounts for your workloads running on Google Cloud.

Create as few service accounts as possible.

Delete any unused service accounts immediately.

Create single-purpose service accounts.

Manage service accounts as resources.

Use random names for the service accounts.