CODEWITHSUNDEEP
google-app-enginegoogle-cloud-storage
themihai
themihai

Reputation: 8611

how can I set google cloud storage ACL to give READ permission only to GAE apps?

The bucket is project-private. So far I managed to update the ACL of the bucket through gsutil CLI. The issue is that only the owner (the app that writes/uploads the files) has access. The other apps specified in the bucket ACL get a permission error when I try to read or list the bucket content. Am I missing something ?

  <Entry>
        <Scope type="UserByEmail">
            <EmailAddress>
                [email protected]
            </EmailAddress>
        </Scope>
        <Permission>
            READ
        </Permission>
    </Entry>
 <Entry>
        <Scope type="UserByEmail">
            <EmailAddress>
                [email protected]
            </EmailAddress>
        </Scope>
        <Permission>
            READ
        </Permission>
    </Entry>

Upvotes: 1

Views: 789

Answers (1)

Marc Cohen
Marc Cohen

Reputation: 3808

Try adding your app's service account to your project team, as illustrated in this tutorial: https://developers.google.com/appengine/articles/prediction_service_accounts. That tutorial focuses on using app engine with the Google Prediction API, however, the concept of enabling access to your app's service account should apply equally well when providing access to Google Cloud Storage resources to App Engine apps.

Upvotes: 1

Related Questions