What should you do?

You are adding steps to a working automation that uses a service account to authenticate. You need to drive the automation the ability to retrieve files from a Cloud Storage bucket. Your organization requires using the least privilege possible.

What should you do?
A . Grant the compute.instanceAdmin to your user account.
B . Grant the iam.serviceAccountUser to your user account.
C . Grant the read-only privilege to the service account for the Cloud Storage bucket.
D . Grant the cloud-platform privilege to the service account for the Cloud Storage bucket.

Answer: C