This boolean constraint disables the feature that allows uploading public keys to service accounts where this constraint is set to 'True'.
By default, users can upload public keys to service accounts based on their Cloud IAM roles and permissions.

Affected resources:

GCP Service Account Key

In Solvay...

Service account keys created follow a standard rotation policy.
This rotation helps to reduce the risk that the aging service account keys are exposed for unwanted reasons.

Disabling the service account key will also disallow users to create unmanaged long-term credentials.

For this policy, no exception will be accepted.