Examtopics

Do not embed secrets related to authentication in source code, such as API keys, OAuth tokens, and service account credentials. Authenticating applications using service account credentials Client libraries can use Application Default Credentials to authenticate with Google APIs and send requests to those APIs. For some applications, you might need to request an OAuth2 access token and use it directly without going through a client library or using the gcloud or gsutil tools. Some applications might use commands from the gcloud and gsutil tools, which are included by default in most Compute Engine images. These tools automatically recognize an instance's service account and relevant permissions granted to the service account. Reference: https://cloud.google.com/docs/authentication#token_lifecycle_management