On-premises application needs to call AutoML APIs using a service account with appropriate access. How should you enable authentication from your data center?

To authenticate an on-premises application to Google Cloud APIs, you need a service account key. The gcloud CLI is the standard tool to create this key file (JSON or P12 format). Your application then uses this key file to authenticate as the service account, which should have the necessary permissions (e.g., AutoML Editor) to access the AutoML APIs. Using service account credentials directly in your application without a key file is not how programmatic authentication works. Direct Interconnect provides network connectivity but doesn't handle authentication itself. Granting a user account permissions and using its credentials is less secure and not recommended for programmatic access from applications; service accounts are designed for this purpose.