Original Reddit post, which the article almost exclusively pulls from: https://old.reddit.com/r/googlecloud/comments/1reqtvi/82000_in_48_hours_from_stolen_gemini_api_key_my/

you are viewing a single comment's thread
view the rest of the comments
[–] 4 points 8 months ago

I wasnt aware of 2FA on API keys.

Is that something new?
And here I thought that's why they tell you to never share it because the API key can't be protected by 2FA (And no, IAM or SSO is not something I will count)

  • source
  • parent