# Legacy Service-Account-Token Secret | ZopNight

> This is a long-lived token that never expires, so a copy taken from a log or a backup keeps working until someone deletes the secret.

Source: https://zop.dev/zopnight/rules/legacy-service-account-token-secret

---

_Security · Medium severity_

## Legacy Service-Account-Token Secret

This is a long-lived token that never expires, so a copy taken from a log or a backup keeps working until someone deletes the secret.

- 3 — clouds covered
- Medium — severity
- Risk — where it shows up
- Manual — fix, change spelled out

Free to start. No card. The playground just needs your work email.

## Found, explained, handed over.

Exposure and fragility, security posture and single points of failure.

- 01. Detect — ZopNight checks this automatically across AWS, Azure and Google Cloud, with read-only access to the account.
- 02. Explain — Every finding says exactly what to change: Replace the legacy service-account-token secret.
- 03. Fix — The finding opens with the change already spelled out, so the fix is one ticket, not an investigation.

- applies_to_fallback: Any resource in the account
- where_it_appears: The Risk tab of Recommendations, with every affected resource listed.

## Related

- [Secret Has Excessive Keys](https://zop.dev/zopnight/rules/secret-has-excessive-keys)
- [Privileged Container](https://zop.dev/zopnight/rules/privileged-container)
- [Bedrock Agent Without Guardrail](https://zop.dev/zopnight/rules/bedrock-agent-without-guardrail)
- [Bedrock Guardrail Missing PII / Sensitive-Information Protection](https://zop.dev/zopnight/rules/bedrock-guardrail-missing-pii-sensitive-information-protection)
- [Container Running as Root](https://zop.dev/zopnight/rules/container-running-as-root)
- [Container with Host Network](https://zop.dev/zopnight/rules/container-with-host-network)

## See the security findings in your account.

Connect a read-only role and the first pass runs on your own estate. This check, and the rest of the catalogue, with it.

[object Object]