query_params = {'GoogleAccessId': 'your-service-account@googleapis.com',
    'Expires': str(expiration), 'Signature': signature}
return '{endpoint}{resource}?{querystring}'.format(endpoint=self.
    API_ACCESS_ENDPOINT, resource=resource, querystring=urllib.parse.urlencode(
    query_params))
Google Cloud Storage Signed URLs with Google App Engine