Currently, the way we instantiate s3 and gcloud storage client assume that credentials will be provisioned in the environment or use profile.
But there is a rare case of needing to access Read only public storage buckets.
That should be supported in case of downloading files anonymously.