Google CloudGoogle Cloud (demo)
High5338 audit entries by 2 principals in 2 projects
- Audit entries
- 38
- Principals
- 2
- Projects
- 2
- API-key calls
- 30
1 person · 16 h agoOpen finding →
Gemini API (AI Studio)
Google · Cloud AI platform · Confirmed · catalog google-ai-studio. Seen by 1 lane through 1 finding.
Policy · none set
Policy changes re-score this app on the next sync, which starts right away.
Combined score
53
High one lane
People
1
Distinct identities across every lane
Seen by
1
Google Cloud
First seen
Aug 15, 2026
Last seen 16 h ago
gcpinvocationsapi-keys
Evidence
Where it was seen
Next steps
Recommended actions
- 0130 calls to Gemini API (AI Studio) used an API key rather than an identity. Restrict or delete those keys and require service accounts, so every prompt has an owner and can be revoked.Google Cloud
- 02Gemini API (AI Studio) trains on data unless a business tier or opt-out is used. Verify which tier these users are on.Google Cloud
- 03The Gemini API is being called directly rather than through Vertex AI. AI Studio keys sit outside VPC Service Controls and CMEK; move production use to Vertex AI and confirm the paid tier so prompts are not used to improve Google models.Google Cloud
Who
People
| Person | Department | Sources | Seen by | Sign-ins · 30 d |
|---|---|---|---|---|
| n/a | Google Cloud principal | Google Cloud | 0 |
Vendor
Policy notes
- Trains on data
- Configurable
- Enterprise tier
- None
- Org policy
- None set
The developer-facing Gemini API keyed by API keys; free-tier prompts may be used to improve Google products. Vertex AI is the governed route.
Billing
What it costs
Last 30 days
$965
Previous 30
$235
Lanes
Score by source
Each lane scores its own evidence. The combined score takes the strongest lane and adds five points per additional lane, capped at 100.