| ```release-note:feature | |
| **GCP Secrets Impersonated Account Support**: Add support for GCP service account impersonation, allowing callers to generate a GCP access token without requiring Vault to store or retrieve a GCP service account key for each role. | |
| ``` | |
| ```release-note:bug | |
| secrets/gcp: fix issue where IAM bindings were not preserved during policy update | |
| ``` |