How to SignURL on GCP without a key (locally, that is!) Please see Google Cloud Storage SignedURL with Cloud Run, Cloud Functions and GCE VMs Using ImpersonatedCredentials for Google Cloud APIs and IDTokens