You are designing an API that allows clients to gcp video

Full Certification Question

You are designing an API that allows clients to retrieve user-specific media files stored in a private Cloud Storage bucket. The API should validate requests against custom business logic defined in your application. The clients are external applications that do not use Google Accounts. How should you implement access control for the media files?