I hate Google&#x27;s approach to authentication. Amazon got it so right with two simple strings and environment variables. By contrast Google have a mess of Oauth2 certificates, central config files, and a bunch of programs that seem to look in different places for credentials. Since AWS created aws-cli everything just works predictably. Google really need to catch up in this area.