Does `GoogleCloudStorageClient` need to "get" a bucket to access it?

[cortadocodes]

To access a bucket, the GoogleCloudStorageClient uses a get_bucket method that requires the storage.buckets.get permission. Do we actually need to get the bucket or are we able to interact with buckets using lower level objects permissions instead of higher level bucket permissions? If we don't need to get buckets, we can reduce the number of permissions given to service accounts.