The Security Token Service exchanges Google or third-party credentials for a short-lived access token to Google Cloud resources.
curl \ https://sts.googleapis.com/v1beta/token