diff --git a/pkg/arvo/ted/get-gcp-jwt.hoon b/pkg/arvo/ted/get-gcp-jwt.hoon
index ac3bcc9bbd..339f12d6fc 100644
--- a/pkg/arvo/ted/get-gcp-jwt.hoon
+++ b/pkg/arvo/ted/get-gcp-jwt.hoon
@@ -31,12 +31,9 @@
 ;<  =key:rsa      bind:m  read-private-key
 ;<  kid=@t        bind:m  (read-setting %private-key-id)
 ;<  aud=@t        bind:m  (read-setting %token-uri)
+=*  scope  'https://www.googleapis.com/auth/devstorage.read_write'
 =/  jot=@t
-  %:  make-jwt
-    key  kid  iss
-    'https://www.googleapis.com/auth/cloud-platform'
-    aud  now.bowl
-  ==
+  (make-jwt key kid iss scope aud now.bowl)
 ;<  p=[access-token=@t expires-at=@da]  bind:m
   (get-access-token jot aud now.bowl)
 (pure:m !>(p))