A cloud engineer needs to safely transition an existing Google Cloud Storage bucket from fine-grained access control to Uniform Bucket-Level Access. What is the correct sequence of steps to complete this transition without disrupting user access?
- 1Audit existing object-level ACLs to identify all users and service accounts relying on fine-grained permissions.
- 2Grant equivalent bucket-level or project-level IAM roles (such as Storage Object Viewer or Storage Object Admin) to the identified users.
- 3Enable Uniform Bucket-Level Access on the Cloud Storage bucket to disable legacy ACLs and enforce IAM policies uniformly.
Cevap
The correct sequence is: first audit existing object ACLs, next grant equivalent IAM roles to those principals, and finally enable Uniform Bucket-Level Access on the bucket.
Migrating to Uniform Bucket-Level Access requires discovering existing ACL dependencies first, provisioning equivalent IAM permissions to affected users next, and lastly enabling Uniform Bucket-Level Access on the bucket to enforce IAM-only access control.
Adım Adım Çözüm
Anahtar Kavram
Migration workflow from legacy ACLs to Uniform Bucket-Level Access (UBLA)