Examkin

Soru

Zorluk: KolayConfiguring Storage Access Controls and Uniform Bucket-Level Access

A cloud engineer needs to standardize access management for a new Cloud Storage bucket by enforcing Cloud IAM permissions exclusively across all stored objects and completely disabling individual object-level Access Control Lists (ACLs). Which bucket configuration must the engineer enable to achieve this requirement?

  1. Uniform Bucket-Level AccessCevap
  2. B
    Fine-Grained Access Control Lists on each object combined with primitive Storage Admin permissions
  3. C
    Project-level primitive Owner role assignment while keeping bucket ACLs active
  4. D
    Revocation of all bucket-level IAM roles to inherit object access from parent organization policies

Cevap

Uniform Bucket-Level Access
Uniform Bucket-Level Access (UBLA) unifies access control by disabling Access Control Lists (ACLs) for all objects in the bucket, ensuring that permissions are managed strictly via Cloud IAM roles.

Adım Adım Çözüm

1
Identify the requirement to disable object ACLs and enforce IAM-only access.
Recognized that individual object-level ACLs must be turned off for unified access management.
Uniform access management simplifies security policies and ensures compliance across all objects in a bucket.
2
Select the Cloud Storage feature designed specifically for this purpose.
Selected Uniform Bucket-Level Access.
Enabling Uniform Bucket-Level Access (UBLA) disables legacy object ACLs and relies solely on Cloud IAM for access checks.

Anahtar Kavram

Uniform Bucket-Level Access (UBLA)
Tahmini Süre:45s
Bu soruyu puanla

Konular

Configuring Storage Access Controls and Uniform Bucket-Level Access

Bu konudan daha fazla soru