Keyless authentication for Zerotouch enrollment

[oodavid]

Documentation recommends creating Google Cloud Service account keys and passing the key to createResellerService[1]. This appears not to be best practice from a security perspective[2]. Are there other keyless authentication options like Workload ID federation etc

ResellerService samsungResellerService = SamsungResellerServiceFactory.createResellerService(resellerId, serviceAccountKeyFilePath, clientIdentifier);

[1] https://developers.google.com/zero-touch/guides/reseller-library/common-operations#create_resellerse...

[2]

https://cloud.google.com/iam/docs/best-practices-service-accounts#service-account-keys