Leaked Google Cloud service-account key — treat as full GCP compromise

A service-account JSON grants the scopes of that service account — often broad (Storage Admin, BigQuery User, Firestore Admin). Leakage = full GCP compromise unless the SA was tightly scoped.