Examkin

Question

Difficulty: EasyConfiguring Storage Access Controls and Uniform Bucket-Level Access

An administrator needs to ensure that access to all objects in a Google Cloud Storage bucket is managed strictly through Cloud IAM permissions, completely disabling individual per-object Access Control Lists (ACLs). Which configuration should the administrator apply to the bucket?

  1. Enable Uniform Bucket-Level Access on the bucket.Answer
  2. B
    Apply fine-grained per-object Access Control Lists (ACLs) to each stored object.
  3. C
    Revoke all IAM permissions inherited from the parent Google Cloud project.
  4. D
    Assign the primitive Owner role to individual users directly on specific objects.

Answer

Enable Uniform Bucket-Level Access on the bucket.
Enabling Uniform Bucket-Level Access disables legacy object-level Access Control Lists (ACLs) for the bucket, ensuring that all access to storage objects is evaluated solely through Cloud IAM policies.

Step-by-Step Solution

1
Identify the goal
Unify permissions under Cloud IAM and disable per-object ACLs for consistent bucket security.
The requirement specifies enforcing bucket-wide IAM controls exclusively.
2
Evaluate Google Cloud Storage access control options
Enabling Uniform Bucket-Level Access (UBLA) turns off ACLs and relies solely on Cloud IAM permissions.
UBLA simplifies access management and ensures uniform security across all bucket objects.

Key Concept

Uniform Bucket-Level Access (UBLA)
Estimated Time:45s
Rate this question

Topics

Configuring Storage Access Controls and Uniform Bucket-Level Access

More questions from this topic