What should you do?

You are building an application that will run in your data center. The application will use Google Cloud Platform (GCP) services like AutoML. You created a service account that has appropriate access to AutoML. You need to enable authentication to the APIs from your on-premises environment.

What should you do?
A . Use service account credentials in your on-premises application.
B . Use gcloud to create a key file for the service account that has appropriate permissions.
C . Set up direct interconnect between your data center and Google Cloud Platform to enable authentication for your on-premises applications.
D . Go to the IAM & admin console, grant a user account permissions similar to the service account permissions, and use this user account for authentication from your data center.

Answer: B

Explanation:

Reference: https://cloud.google.com/vision/automl/docs/before-you-begin

To use a service account outside of Google Cloud, such as on other platforms or on-premises, you must first establish the identity of the service account. Public/private key pairs provide a secure way of accomplishing this goal. You can create a service account key using the Cloud Console, the gcloud tool, the serviceAccounts.keys.create() method, or one of the client libraries.

Ref: https://cloud.google.com/iam/docs/creating-managing-service-account-keys