Certificate Manager REST API

For the easiest path, authenticate with the Google Cloud CLI and mint a user access token. Follow Authenticate with REST and run gcloud auth login, then use gcloud auth print-access-token to get a bearer token for REST calls. For local application code, you can also set up Application Default Credentials with gcloud auth application-default login.

Create a service account in your Google Cloud project and grant it the IAM roles needed for Certificate Manager. For a downloadable credential, create a JSON key using Create and delete service account keys. For client libraries and local tools, Google recommends Application Default Credentials, which can come from a service account key file referenced by GOOGLE_APPLICATION_CREDENTIALS, an attached service account, or gcloud auth application-default login. These credentials are used to obtain OAuth 2.0 access tokens for API calls.