google-cloud-auth

原文涵盖的主题

• Authenticating to Google Cloud
• Authentication
• Clarifying Questions for the Agent
• Human Authentication
• Types of User Identities
• Methods of Access for Developers and Administrators
• For End-Users and Customers
• Service-to-Service Authentication

Authentication is the process of proving who you are. In Google Cloud, you represent a Principal (an identity like a user or a service). This is the first step before Authorization (determining what you can do). Before providing a specific solution, clarify the following with the user: 1. Who or what is authenticating? (A human developer, a local script, or an application running in production?) 2. Where is the code running? (Local laptop, Compute Engine, GKE, Cloud Run, or another cloud like AWS/Azure?) 3. What is the target? (A Google Cloud API like Storage/BigQuery, or a custom application you built?) 4. Are you using a high-level client library? (e.g., Python, Go, Node.js libraries usually handle ADC automatically.) -- For users to access Google Cloud, they need an identity that Google Cloud can recognize. Google Cloud supports several ways to configure identities for your internal workforce (developers, administrators, employees): Google-Managed Accounts: You can use Cloud Identity or Google Workspace to create managed user accounts. These are called managed accounts because your organization controls their lifecycle and configuration. Federation using Cloud Identity or Google

这里只展示节选，请以完整原文和当前要求为准。