google-cloud-recipe-auth

Google Cloud authentication for local development relies on Application Default Credentials (ADC). Install the Google Cloud SDK and run the gcloud auth application-default login command to generate local ADC credentials for secure resource access.

You can authenticate service accounts in Google Cloud without using keys by implementing service account impersonation. This approach establishes least-privilege access patterns, allowing developers and operators to avoid credential sprawl and manage access risks securely.

Yes, Application Default Credentials (ADC) work with Cloud Run and GKE. The Skill provides ADC setup and usage guidance tailored for these deployment platforms, alongside Compute Engine, to automate secure authorization workflows for production workloads.

You need identity federation for Google Cloud authentication when managing cross-cloud and hybrid environments. It provides federation and identity management guidance to enable secure authorization workflows across diverse platforms without relying on long-lived keys.

You can enforce least privilege IAM roles for Google Cloud service accounts by applying service account impersonation patterns. This method specifies exact IAM role requirements, delegating access to human and service identities while avoiding keys and minimizing credential sprawl.