An organization is updating its Cloud Storage operational guidelines to align with corporate data governance standards. The security policy mandates consolidating object access controls under identity and access management policies. Which TWO statements correctly describe the operational behaviors and configuration rules when Uniform Bucket-Level Access (UBLA) is enabled on a storage bucket?
- Access Control Lists (ACLs) are disabled, making IAM permissions the single source of authority for access requests to the bucket and its objects.Answer
- Granting predefined IAM roles like Storage Object Viewer at the bucket level provides access across all stored objects without evaluating individual object ACLs.Answer
- CExisting individual object ACLs continue to be evaluated alongside IAM permissions to determine access for legacy users.
- DManaging bucket access policy under UBLA requires assigning primitive Project Owner roles to security administrators.
Answer
Enforcing Uniform Bucket-Level Access disables ACL evaluation entirely, making IAM policies the sole access authority and allowing predefined bucket-level IAM roles to grant uniform object access.
Enforcing Uniform Bucket-Level Access ensures that Access Control Lists are disabled for all resources within the bucket, shifting access decision authority exclusively to IAM policies. Granting predefined roles such as Storage Object Viewer at the bucket level provides uniform access to all objects contained within it.
Step-by-Step Solution
Key Concept
Uniform Bucket-Level Access (UBLA) enforcement and IAM single-source access control