You can directly reference a service account from the code. Or, if you want separation between and code and credentials, set the GOOGLE_APPLICATION_CREDENTIALS environment variable, and let the SDK auto discover it.