skills.rest
google
googleOFFICIAL
Explore all skills by this author →
Website𝕏@GoogleOSSGitHub

google-cloud-recipe-auth

Authenticate and authorize users and services for Google Cloud access.

17.1k|1.4k|Updated Mar 31, 2026
Search Tags:#IAM#Google Cloud#Authentication#Service Account#Access Control
One-click install
npx skills add https://github.com/google/skills --skill google-cloud-recipe-auth-google
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: google-cloud-recipe-auth
Source: https://github.com/google/skills/tree/main/skills/cloud/google-cloud-recipe-auth
Command: npx skills add https://github.com/google/skills --skill google-cloud-recipe-auth-google

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires google-cloud-python, google-cloud-cli, and includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve?

This Skill helps you navigate the complex landscape of authenticating and authorizing to Google Cloud services, ensuring secure access and access control.

Core Features & Use Cases

  • User and Service Identity Management: Configures user identities (users, service identities) for secure access.
  • Authentication Options: Supports multiple authentication methods like Google-Managed Accounts, Federation, and Workforce Identity Federation.
  • Human Authentication: Guidance for human access, including Cloud Console, gcloud CLI, ADC, and Service Account Impersonation.
  • Service-to-Service Authentication: Best practices for secure service account usage and Service Agent management.
  • Authorization and IAM: Implement IAM to define who can access what within Google Cloud.
  • Examples: Detailed steps for local Python development, Cloud Run to Cloud SQL integration, and calling a custom application with OIDC.

Quick Start

Authenticate to Google Cloud and check if the correct permissions are assigned for the service account.

Frequently Asked Questions about google-cloud-recipe-auth

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I authenticate to Google Cloud using Application Default Credentials?▼

Application Default Credentials (ADC) authenticate to Google Cloud by automatically finding credentials for your environment. This Skill provides best practices for configuring ADC for local Python development and service-to-service access.

What is the best way to set up service account impersonation in Google Cloud?▼

Service account impersonation in Google Cloud is best set up by granting a principal the ability to generate short-lived access tokens. This Skill offers expert guidance for configuring impersonation for secure human and service-to-service authentication.

How do I configure IAM roles for a service account accessing Cloud SQL from Cloud Run?▼

Configuring IAM roles for a service account accessing Cloud SQL from Cloud Run requires assigning the correct permissions to the Cloud Run service identity. This Skill provides detailed steps and examples for this integration.

When should I use Workforce Identity Federation instead of Google-Managed Accounts for authentication?▼

Use Workforce Identity Federation instead of Google-Managed Accounts when you need to let external identities access Google Cloud without syncing them to Cloud Identity. This Skill supports configuring both authentication methods.

How do I authenticate a custom application using OIDC in Google Cloud?▼

Authenticating a custom application using OIDC in Google Cloud involves exchanging OIDC tokens to verify caller identity. This Skill includes examples for calling custom applications with OIDC securely.

Do I need the gcloud CLI to manage access control in Google Cloud?▼

You need the gcloud CLI to manage access control in Google Cloud for command-line authentication and IAM policy assignments. This Skill provides guidance on using the CLI alongside the Cloud Console for secure authorization.

Related Skills

Explore More Software Engineering Skills→
jholhewresjholhewres
3

gcloud

Manage Google Cloud Platform resources via the gcloud CLI.

Community
Intermediate
kubonykubony
10

gcp-cloudrun

Deploy, scale, and manage Cloud Run services using the gcloud CLI.

Community
Advanced
awslabsawslabs
15

iam

Design and review AWS IAM policies for least privilege access.

Official
Advanced
northseadlnorthseadl

cognito

Manage user authentication, authorization, and identity federation with AWS Cognito.

Community
Advanced