- NAME
-
- gcloud beta iam service-accounts keys get-public-key - get the public key for a service account key pair
- SYNOPSIS
-
-
gcloud beta iam service-accounts keys get-public-keyKEY-ID--iam-account=IAM_ACCOUNT--output-file=OUTPUT_FILE[--type=TYPE; default="pem"] [GCLOUD_WIDE_FLAG …]
-
- DESCRIPTION
-
(BETA)Get the public key for a service account key pair in pem or raw format. - EXAMPLES
- To get the public key for some key ID for some service account (to validate a
blob or JWT signature, for example), run:
gcloud beta iam service-accounts keys get-public-key keyid --output-file = key-file --iam-account = my-iam-account@my-project.iam.gserviceaccount.com - POSITIONAL ARGUMENTS
-
-
KEY-ID - The key to get.
-
- REQUIRED FLAGS
-
-
--iam-account=IAM_ACCOUNT - A textual name to display for the account.
-
--output-file=OUTPUT_FILE - The output file to write the public key.
-
- OPTIONAL FLAGS
-
-
--type=TYPE; default="pem" - The type of the public key to get.
TYPEmust be one of:pem,raw.
-
- GCLOUD WIDE FLAGS
- These flags are available to all commands:
--access-token-file,--account,--billing-project,--configuration,--flags-file,--flatten,--format,--help,--impersonate-service-account,--log-http,--project,--quiet,--trace-token,--user-output-enabled,--verbosity.Run
$ gcloud helpfor details. - NOTES
- This command is currently in beta and might change without notice. This variant
is also available:
gcloud alpha iam service-accounts keys get-public-key
gcloud beta iam service-accounts keys get-public-key
Except as otherwise noted, the content of this page is licensed under the Creative Commons Attribution 4.0 License , and code samples are licensed under the Apache 2.0 License . For details, see the Google Developers Site Policies . Java is a registered trademark of Oracle and/or its affiliates.
Last updated 2026-05-27 UTC.

