gcloud auth print-access-token - print an access token for the specified account

gcloud auth print-access-token[ACCOUNT][--lifetime=LIFETIME][GCLOUD_WIDE_FLAG …]

Note that token itself may not be enough to access some services. If you use thetoken with curl or similar tools, you may see permission errors similar to "APIhas not been used in project 32555940559 before or it is disabled.". If ithappens, you may need to provide a quota project in the "X-Goog-User-Project"header. For example,

curl-H"X-Goog-User-Project: your-project"-H"Authorization: Bearer$(gcloudauthprint-access-token)"foo.googleapis.com

The identity that granted the token must have the serviceusage.services.usepermission on the provided project. Seehttps://cloud.google.com/apis/docs/system-parametersfor more information.

[ACCOUNT]

Account to get the access token for. If not specified, the current activeaccount will be used.

--lifetime=LIFETIME

Access token lifetime. The default access token lifetime is 3600 seconds, butyou can use this flag to reduce the lifetime or extend it up to 43200 seconds(12 hours). The org policy constraintconstraints/iam.allowServiceAccountCredentialLifetimeExtension mustbe set if you want to extend the lifetime beyond 3600 seconds. Note that thisflag is for service account impersonation only, so it must be used together withthe--impersonate-service-account flag.

Run$gcloud help for details.