Explanation:
On GCE, Application Default Credentials (ADC) automatically use the instance's attached service account tokens from the metadata server. No keys needed, secure. OAuth for users, keys for service accounts manually.
A Compute Engine app needs to call Google APIs as its attached service account. Which credentials mechanism does the client library use automatically?
A
A JSON key on disk
B
Application Default Credentials via the metadata server
C
OAuth consent screen
D
API keys
No comments yet.