User-managed keys can be managed by the IAM API, gcloud command-line tool, or the service accounts page in the Google Cloud Console. You can create up to 10 service account keys per service account to facilitate key rotation. Consider using Secret Manager to help securely manage your keys..