Allowing access to a specific Cloud Storage Bucket

  • MEMBER_TYPE is the type of the member you are removing from the policy. For example, user. represents both Google accounts and Google groups.  Two special member types are: allAuthenticatedUsers and allUsers
  • MEMBER_NAME is the name of the member you are removing from the policy. For example, [email protected].
  • BUCKET_NAME is the name of the bucket from which you are allowing / denying member access. For example, my-test-bucket.
  • IAM_ROLE is the role to be granted / denied - e.g. roles/storage.admin
gsutil iam ch MEMBER_TYPE:MEMBER_NAME:IAM_ROLE gs://BUCKET_NAME


gsutil iam ch user:[email protected]:roles/storage.admin gs://my_test_bucket

 

anuj

I am passionate about getting cloud solutions right the first time. I help customers transition to the public cloud with the appropriate security controls and guardrails. GCP, AWS and Azure Security Specialist. <a href="https://calendly.com/anujvarma/google-cloud-architect-initial-consultation">Initial Consultation</a>

Leave a reply

Your email address will not be published. Required fields are marked *