Authentication configuration. Requirements depend on sourceType:
S3_BUCKET: roleARN is required, azureAppID and azureDirectoryID must be null
AZURE_BLOB: azureAppID and azureDirectoryID are required, roleARN must be null
GCP_BIGQUERY: all fields must be null (uses service account authentication)
GCS_BUCKET: all fields must be null (uses service account authentication)