https://www.rogerthat.dev/tags/security/ Recent content in Security on Roger That Dev Hugo en-us Thu, 02 Jul 2026 13:06:24 -0700 https://www.rogerthat.dev/posts/adc-for-agent-platform/ Thu, 02 Jul 2026 13:06:24 -0700 https://www.rogerthat.dev/posts/adc-for-agent-platform/ <p>When you’re using Google Cloud’s Agent Platform (formerly Vertex AI), a leaked API key can be a terrifying (and expensive) disaster. Luckily, you don’t have to juggle API keys to access AI models on Google Cloud from your application code. <strong>Application Default Credentials</strong> are the safer and recommended alternative. The <a href="https://console.cloud.google.com/agent-platform/studio/settings/api-keys">Agent Platform API Keys page in the console</a> will tell you the same:</p> <figure><img src="console.png" alt="Agent Platform API Keys page" width="600"> </figure> <p>Conveniently, it provides a shell script that will set you up with application default credentials. The problem is that it only works on Mac and Linux. If you’re on Windows, or if for whatever reason this script fails on your machine, you might be tempted to just hit that &ldquo;Create API Key&rdquo; button and avoid application default credentials altogether.</p>