gcloud
CLI, or the web console.storage.objects.list
.roles/storage.objectViewer
role, has the storage.objects.get
and the storage.objects.list
permissions. See Understanding roles documentation for all the available roles and the associated permissions.gcloud
. Service Account is great for your application/microservice.gcloud auth application-default login
when running locally,GOOGLE_APPLICATION_CREDENTIALS
environmental variable that points to the path of a Service Account key file,