Encountered 403 Forbidden : Service Account calling Google APIs using AWS Lambda

Google Cloud Integration Services
3

HI Roderick_G. Thanks for the response. I did find out something after
performing these checks:

  1. I verified that the service.json file was located in the same
    directory as my python script.
  2. I checked my environment variables but I really don;t need the
    Delegete_Email variable because I don’t have delegate access.
  3. The Delegate Access statement was already commented out.
  4. I made sure that the scopes are all enabled because both of the two
    mentioned are under the campaigns 360 API for campaigns method.
  5. I tested the Profile ID when testing the Google Explorer for the
    desired APIs for listing campaigns and that brought in data.
  6. I should have all the google-api-python-client libraries available.

Here’s what I did to see if I could verify accessing my scopes:

  1. Set them to “readonly” (https://
    www.googleapis.com/auth/dfareporting.readonly)
  2. Reran the script and verified that I now saw this error:

“errorMessage”: “(‘No access token in response.’, {‘id_token’:
‘eyJhbGciOiJSUzI1NiIsImtpZCI6Ijg1YmE5MzEzZ…’})”,
“errorType”: “RefreshError”,
Q) Could it be that the server was trying to refresh the token and failed?
Q) Is there something that I’m missing concerning refreshing of tokens for
Google Service Accounts or has my current code accounted for that but I may
be missing something logically?

Thanks