Examkin

Question

Difficulty: EasyConfiguring Storage Access Controls and Uniform Bucket-Level Access

A cloud engineer needs to standardize access management for a new Cloud Storage bucket by enforcing Cloud IAM permissions exclusively across all stored objects and completely disabling individual object-level Access Control Lists (ACLs). Which bucket configuration must the engineer enable to achieve this requirement?

  1. Uniform Bucket-Level AccessAnswer
  2. B
    Fine-Grained Access Control Lists on each object combined with primitive Storage Admin permissions
  3. C
    Project-level primitive Owner role assignment while keeping bucket ACLs active
  4. D
    Revocation of all bucket-level IAM roles to inherit object access from parent organization policies

Answer

Uniform Bucket-Level Access
Uniform Bucket-Level Access (UBLA) unifies access control by disabling Access Control Lists (ACLs) for all objects in the bucket, ensuring that permissions are managed strictly via Cloud IAM roles.

Step-by-Step Solution

1
Identify the requirement to disable object ACLs and enforce IAM-only access.
Recognized that individual object-level ACLs must be turned off for unified access management.
Uniform access management simplifies security policies and ensures compliance across all objects in a bucket.
2
Select the Cloud Storage feature designed specifically for this purpose.
Selected Uniform Bucket-Level Access.
Enabling Uniform Bucket-Level Access (UBLA) disables legacy object ACLs and relies solely on Cloud IAM for access checks.

Key Concept

Uniform Bucket-Level Access (UBLA)
Estimated Time:45s
Rate this question

Topics

Configuring Storage Access Controls and Uniform Bucket-Level Access

More questions from this topic