To enable a GKE service account to access Cloud Storage and perform a 'storage.buckets.update' operation, which role should be assigned? (Select One)