Need to understand the difference between adding scope vs adding role to service account
My use case is very simple. Basically from VM communicate with Google Cloud Storage bucket. Communication means listing down what is inside, copy files, delete files etc.
I saw I can achieve this by two ways –