Provide the bucket and optional key prefix, then a service account JSON key with read-only access to the bucket.Add the connection under Settings -> Connections. Saving verifies it with a read-only test call.
Apps can call read operations only. Operations marked Edit exist in the connector’s catalog but cannot be granted to apps yet. Apps declare the operations they use per connection; see Using connections in apps.