summaryrefslogtreecommitdiff
path: root/third_party/googleapis/google/iam/README.md
diff options
context:
space:
mode:
Diffstat (limited to 'third_party/googleapis/google/iam/README.md')
-rw-r--r--third_party/googleapis/google/iam/README.md14
1 files changed, 14 insertions, 0 deletions
diff --git a/third_party/googleapis/google/iam/README.md b/third_party/googleapis/google/iam/README.md
new file mode 100644
index 0000000..c402a9d
--- /dev/null
+++ b/third_party/googleapis/google/iam/README.md
@@ -0,0 +1,14 @@
+# Introduction
+
+# Key Concepts
+
+## Service Account
+
+A Service Account is an account used to identify services (non-humans) to Google.
+A Service Account has a list of Service Account Keys, which can be used to authenticate to Google.
+
+## Service Account Keys
+
+A Service Account Key is a public/private keypair generated by Google. Google retains the public
+key, while the customer is given the private key. The private key can be used to [sign JWTs and
+authenticate Service Accounts to Google](https://developers.google.com/identity/protocols/OAuth2ServiceAccount#authorizingrequests).