To use a service account from outside of Google Cloud, such as on other platforms or on-premises, you must first establish the identity of the service account. Public/private key pairs provide a secure way of accomplishing this goal. When you create a service account key, the public portion is stored on Google Cloud, while the private portion is available only to you.

使用python3,与谷歌云平台（google cloud platform，GCP）进行数据交互，通过BigQuery从data lake中读取数据，以及写入cloud storage文件的示例。