I see we have GCP secret engine which can create service account keys and auth tokens.
But,
Can I use Vault to log in to GCP platform itself ?
For example: I use vault to generate dynamic TTL based password mapped to certain user’s account/username and the respective employee can use it to log in to GCP to do regular task ?
Not really - the closest feature to what you describe is Google Cloud - Secrets Engines | Vault by HashiCorp but that’s intended for service accounts, not humans using the UI.
In the name of Zero Trust and secure network access … can we expect the combination of Boundary + Vault for the same issue? (connection to platform like these)