I would check that the service account you created has bucket level permissions. I got to the same point and that was my blocker.
I would check that the service account you created has bucket level permissions. I got to the same point and that was my blocker.