For me, google cloud is the worst because their documentation is terrible. And i think their docs are bad because their permission system is bad. For example,

For me, google cloud is the worst because their documentation is terrible. And i think their docs are bad because their permission system is bad. For example, some services require more permissions than documented in the docs; those permissions are documented in some random document you have to find. The service account thing is a prime example. WTF is it and if I already have the oauth scope granted why do I need it? Answer: because you do. Trying to get least perm in GcP is an exercise in futolity. Once it works don't fuck with it. In AWS the structure of permissions is generally super simple; services, actions, permissions. In AWS the magic is knowing which API calls fall under which permission. And generally the graph for your configuration is similar (and templatable). I avoid Google Cloud at all costs because I need at least a week to get something to work with their perms. Oh, did I mention their docs suck?