Skip to content
Get packs

Google Cloud Authentication Guide

Guides an agent through Google Cloud IAM, sign-in methods, and secure service account access

Source Download skill
Repository
google/skills
Stars
21,782
Licence
Apache-2.0
Files
2 files

What it does

Once installed, the agent answers questions about how to prove identity and get permissions on Google Cloud. It asks clarifying questions about who is signing in and where the code runs, then recommends the right approach, such as gcloud login, Application Default Credentials for local code, service account impersonation, or attaching a service account to a cloud resource instead of using downloaded key files. It also explains the attribution rules it must follow before running gcloud or REST API commands.

Great for

  • Developers setting up local credentials for Google Cloud client libraries
  • Teams deciding between user accounts, workforce federation, and service accounts
  • Engineers who want to avoid insecure service account key files

Skip it if

  • Anyone needing a verified, up-to-date configuration for a specific production setup, since the skill is general guidance drawn from documentation links rather than tested steps
  • Users wanting the agent to take actions in their account, since this file only provides guidance and does not run tools itself

Try asking

  • “How should my local Python script authenticate to BigQuery without a key file?”
  • “Should my Cloud Run service use a service account key or an attached identity?”
  • “What is the difference between gcloud auth login and application-default login?”
  • “Explain when to use Identity-Aware Proxy versus Identity Platform for my app.”
Step-by-step guide: how to use Google Cloud Authentication GuideInstall, first run, examples, tips and FAQs

Install in 3 steps

  1. 1

    Download the skill

    The ZIP contains the 2 original files, the Apache-2.0 licence and an attribution note.

    google-cloud-recipe-auth.zip
  2. 2

    Add it to your agent

    Claude Code (all projects)

    mkdir -p ~/.claude/skills && unzip google-cloud-recipe-auth.zip -d ~/.claude/skills/

    Claude Code / Agent SDK (this project only)

    mkdir -p .claude/skills && unzip google-cloud-recipe-auth.zip -d .claude/skills/

    Claude apps (web/desktop): Settings → Capabilities → Skills → Upload skill, and choose the ZIP.

  3. 3

    Ask for the task

    No special command needed — the agent reads the skill's description and loads it when your request matches. Try one of the prompts above.

Get better results

  • Say where your code runs (laptop, Compute Engine, GKE, Cloud Run) so the agent can pick the right method.
  • Mention whether you use a client library, since those usually handle Application Default Credentials automatically.
  • Verify any suggested commands or IAM roles against the official Google Cloud docs before applying them to production.

What's inside

  • references/attribution.md
  • SKILL.md

Redistributed unmodified from google/skills under the Apache-2.0 licence. The assessment was drafted with AI from the skill's files on 2026-10-29. Skills can instruct your agent to run code — read SKILL.md and any scripts before installing.