An organization is migrating an existing Google Cloud Storage bucket from fine-grained Access Control Lists (ACLs) to Uniform Bucket-Level Access (UBLA) to meet security compliance standards. What is the correct sequence of steps to execute this migration safely without revoking required access?
- 1Audit existing object ACL permissions across the bucket and identify all principal access requirements.
- 2Grant equivalent IAM roles (such as Storage Object Viewer or Storage Object Admin) to principals at the bucket or project level.
- 3Enable Uniform Bucket-Level Access on the Cloud Storage bucket using the gcloud storage buckets update command.
- 4Verify access permissions and audit Cloud Logging to ensure authorized users successfully access objects under IAM policies.
Cevap
The correct operational order is: 1) Audit existing object ACL permissions and identify principal access requirements, 2) Grant equivalent IAM roles at the bucket level, 3) Enable Uniform Bucket-Level Access on the bucket, 4) Verify access permissions using audit logging.
The correct sequence requires auditing existing fine-grained permissions first, granting corresponding IAM roles to ensure no access disruption, turning on Uniform Bucket-Level Access to enforce bucket-level IAM security, and finally verifying user access via audit logs.
Adım Adım Çözüm
Anahtar Kavram
Migration workflow from legacy Cloud Storage ACLs to Uniform Bucket-Level Access (UBLA)