Google Cloud Compute Engine: Service Accounts and Scopes

Instance 1 - Read-Only

Create a Compute Engine instance with a Storage Read Only service account scope, and attempt to copy a file to it.

Instance 2 - Read Write