Access to Google Cloud Storage is secured with IAM. Let's have a look at the following list of predefined roles and their details:
- Storage Object Creator: Has rights to create objects but does not give permissions to view, delete, or overwrite objects
- Storage Object Viewer: Has rights to view objects and their metadata, but not the ACL, and has rights to list the objects in a bucket
- Storage Object Admin: Has full control over objects and can create, view, and delete objects
- Storage Admin: Has full control over buckets and objects
Cloud Storage also offers security via ACLs. Let's have a look at the permissions available and their details:
- Reader: This can be applied to a bucket or an object. It has rights to list a bucket's ...