Providing Cloud CDN Permissions to read Cloud Storage buckets

Also read Cloud Storage - Providing Read Write Access to External (Partner) Users

Provide Cloud CDN IAM access (basically, provide access to the default service account used by Cloud CDN --> to access cloud storage)

Add the Cloud CDN service account to Cloud Storage ACLs as shown below. What you are doing is granting object level read rights to a service account

gsutil iam ch \
serviceAccount:[email protected]:objectViewer \
gs://BUCKET




Need an experienced Cloud Networking or a Cloud Data Protection Expert?  Anuj has successfully delivered over a dozen deployments on each of the public clouds (AWS/GCP/Azure) including several DevSecOps engagements. Set up a time with Anuj Varma.

Need an experienced Cloud Networking or a Cloud Data Protection Expert?  Anuj has successfully delivered over a dozen deployments on each of the public clouds (AWS/GCP/Azure) including several DevSecOps engagements. Set up a time with Anuj Varma.

anuj

I am passionate about getting cloud solutions right the first time. I help customers transition to the public cloud with the appropriate security controls and guardrails. GCP, AWS and Azure Security Specialist. <a href="https://calendly.com/anujvarma/google-cloud-architect-initial-consultation">Initial Consultation</a>

Leave a reply

Your email address will not be published. Required fields are marked *