- Create a Google cloud storage bucket. Use default values.
- At this step: Choose how to control access to objects: choose fine-grained as access control
- After creation, Click on the left menu and navigate to IAM & Admin -> Service Accounts.
- Click on CREATE SERVICE ACCOUNT.
- Fill in the required details.
- At the second step (Grant this service account access to project), select a role. Scroll down until you see Cloud Storage and select the role Storage Admin.
- Click on the created service account email.
- Click on KEYS -> ADD KEY -> Create new key.
- When prompted for the key type, choose JSON. The key will then be downloaded.