https://quadexcel.com/wp/gcp-workload-identity-federation-access-gcs-bucket-from-aws-lambda-function/