I observe Google API service account getting a 404 when it tries to read a file (i.e. call the files.get method https://developers.google.com/drive/api/reference/rest/v3/files/get )

This happens even though the file’s sharing is set to “Anyone with the link can view”,

This happens if using only non-restricted scopes i.e. drive.file rather than the restricted-level drive.readonly.

Recent tightening of certification requirements mean that using drive.readonly now requires a security assessment at CASA Level 3, which is enterprise level.

It does just seem a bit odd that it should be so difficult to allow an app to read a file that a user has made publicly available? I can’t find anywhere this is stated clearly, so I’m wondering if I have misunderstood something.