You have two Google Cloud projects, Project A and Project B. Your objective is to create a Cloud Function in Project A that stores its output in a Cloud Storage bucket located in Project B while ensuring the principle of least privilege. What actions should you take?