A security researcher discovered the API keys can still be used for 23 minutes after deletion, even though the cloud provider claims deletion is immediate.
First seen on darkreading.com
Jump to article: www.darkreading.com/identity-access-management-security/google-api-keys-active-after-deletion
