While setting permissions for a new Google Compute Engine VM instance, I noticed that "Cloud Datastore" is a service I can grant my VM access to.
As far as I can tell, remote_api
and the Python Protobuf Datastore API both use service accounts, which bypass VM permissions.
Does Google have any Datastore libraries that support VM-permission-based authentication?