title: Is there a way to use an existing non-Google token with GCP APIs, specifically cloud logging?
body: <p>I've been combing through the GCP docs around service accounts and workload identity federation, IAM roles, etc., but still don't understand this.</p>
  <p>Is there a way I can use existing non-GCP tokens in the browser to either:</p>
  <ul>
  <li>log directly to Cloud Logging</li>
  <li>obtain a token that allows short-lived use of Cloud Logging</li>
  </ul>
  <p>I could expose a request/reply endpoint in our API gateway to create a short-lived token, but from reading the docs it seems like I might not have to do this.</p>
  <p>So far I've setup a Workload Identity Federation for our auth provider and a service account, but I'm not sure this is the right direction.</p>