Reputation: 731
I am unable to update bucket ACLs using terraform. I am getting below mentioned error:-
Error retrieving current ACLs: googleapi: Error 403: @appspot.gserviceaccount.com does not have storage.buckets.get access to , forbidden
But if I tried to add ACLs using GCP CLI it works.
Can anyone tell me what is the problem?
Upvotes: 0
Views: 311
Reputation: 151
According to the error message, it looks like the default App Engine service account [email protected] is missing storage.buckets.get permission.
After you added ACLs using GCP CLI, do you try to re-enable API for your application?
These links Cloud IAM permissions for the Google Cloud Console and Granting roles to service accounts for you consideration.
Upvotes: 1