Ah, read API as CLI (with AWS they're essentially the same). The biggest problem with GCP's api/cli/sdk/console is they're not the same. There are things you c

Ah, read API as CLI (with AWS they're essentially the same). The biggest problem with GCP's api/cli/sdk/console is they're not the same. There are things you can only do in the console, or have different grammars across CLI/SDK, or have different permission schemes across them. Add to that the intermixing of "IT Admin" and "Cloud Admin" roles due to all of your Google Groups also being IAM groups, and IAM being somehow tied into your G Suite admin area, it's just a confusing mess. With AWS, the CLI is the API is the SDK. So if you can use one, you can use all of them very easily.