skills.rest
wangx7
wangx7COMMUNITY
Explore all skills by this author →
GitHub

google-cloud-recipe-auth

Configure secure Google Cloud authentication and authorization for human and service principal use cases.

Updated Jun 26, 2026
Search Tags:#authorization#authentication#iam#google-cloud#service-accounts#workload-identity#application-default-credentials
One-click install
npx skills add https://github.com/wangx7/skills-collection --skill google-cloud-recipe-auth-wangx7
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: google-cloud-recipe-auth
Source: https://github.com/wangx7/skills-collection/tree/main/google-skills/skills/cloud/google-cloud-recipe-auth
Command: npx skills add https://github.com/wangx7/skills-collection --skill google-cloud-recipe-auth-wangx7

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill solves the common pain point of developers and teams misconfiguring Google Cloud authentication and authorization, which leads to security vulnerabilities, failed API calls, and wasted troubleshooting time for both local development and production workloads.

Core Features & Use Cases

  • Multi-scenario authentication guidance: Covers human user access (local development, workforce identity, IAP, Identity Platform) and service-to-service authentication (service accounts, workload identity federation, API keys) for all common Google Cloud deployment environments.
  • Security best practices: Explicitly discourages insecure practices like static service account key usage, recommends least-privilege IAM roles, and provides steps for secure credential management.
  • Troubleshooting support: Includes a validation checklist and guidance for resolving common authentication failures such as misconfigured access scopes or missing IAM permissions, with real-world examples for use cases like local Python development and Cloud Run to Cloud SQL connections.

Quick Start

Use the google-cloud-recipe-auth skill to get step-by-step, security-aligned instructions for configuring authentication for your local Google Cloud development environment or production service workload.

Frequently Asked Questions about google-cloud-recipe-auth

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I authenticate applications to Google Cloud APIs without using static service account keys?▼

Configure Google Cloud authentication for GKE or Cloud Run using workload identity federation. This attaches a secure, short-lived service account token to your workload, enforcing least-privilege IAM access without managing static keys.

What is the best way to configure local development authentication for Google Cloud?▼

Configure local development authentication for Google Cloud using Application Default Credentials. This approach leverages your human user credentials to securely access APIs, avoiding insecure static service account key files.

Why does my Google Cloud authentication fail with access scope or credential misconfiguration errors?▼

Google Cloud authentication fails due to misconfigured access scopes or missing IAM permissions on the service account. Validate your credential configuration and access scopes using the provided troubleshooting checklist to resolve the API call failures.

When do I need workload identity federation for Google Cloud service-to-service authentication?▼

Use workload identity federation for Google Cloud service-to-service authentication when deploying workloads on external clouds or on-premises. It grants short-lived Application Default Credentials by impersonating service accounts, eliminating static key management.

Can I use service account impersonation for custom application access to Google Cloud APIs?▼

Yes, you can use service account impersonation to grant custom applications secure access to Google Cloud APIs. This dynamically issues short-lived credentials, enforcing least-privilege IAM roles without managing static service account keys.

Related Skills

Explore More Software Engineering Skills→
ssmleossmleo

iam-recommendations-fetcher

Fetch IAM recommendations and insights from Google Cloud for target scopes.

Community
Intermediate
2nth-ai2nth-ai
1

tech/google/cloud/compute

Deploy and manage Google Cloud resources using gcloud CLI.

Official
Advanced
OpenTideHQOpenTideHQ
4

google-cloud-platform

Interpret GCP Cloud Audit Logs and IAM mechanics for abuse detection.

Official
Advanced
thesammykinsthesammykins

pangolin-architect

Configure Pangolin to deploy an identity-aware reverse proxy with WireGuard support.

Community
Advanced