No matter how you like to participate in developer communities, Pulumi wants to meet you there. If you want to meet other Pulumi users to share use-cases and best practices, contribute code or documentation, see us at an event, or just tell a story about something cool you did with Pulumi, you are part of our community.

Pulumi Community

this looks like your service account doesn't have permission to your GCS bucket

By activating service account
`gcloud auth activate-service-account --key-file=$(authkey.secureFilePath)`

It has role to read objects from Cloud Storage

Shouldn't the `pulumi login` command fail in case the permissions are bad?

yeah I agree, a quick google of "invalid grant" does throw a lot of google related issues, so it does feel like a google perm issue though

<@UCWG26BH7> thanks, got it figured out - Pulumi wouldn't accept any authentication methods except env var :slightly_smiling_face: