Cloud Storage Permissions

Question 1

storage.buckets.create

Answer 1

Create new buckets in a project.

Question 2

storage.buckets.delete

Answer 2

Delete buckets.

Question 3

storage.buckets.get

Answer 3

Read bucket metadata, excluding IAM policies, and list or read the Pub/Sub notification configurations on a bucket.

Question 4

storage.buckets.getIamPolicy

Answer 4

Read bucket IAM policies.

Question 5

storage.buckets.list

Answer 5

List buckets in a project. Also read bucket metadata, excluding IAM policies, when listing.

Question 6

storage.buckets.setIamPolicy

Answer 6

Update bucket IAM policies.

Question 7

storage.buckets.update

Answer 7

Update bucket metadata, excluding IAM policies, and add or remove a Pub/Sub notification configuration on a bucket.

Question 8

Which permissions do not apply to buckets with uniform bucket-level access enabled.

Answer 8

The storage.objects.getIamPolicy and storage.objects.setIamPolicy permissions do not apply to buckets with uniform bucket-level access enabled.

Question 9

What permissions are needed in order to replace existing objects?

Answer 9

In order to replace existing objects, both storage.objects.create and storage.objects.delete permissions are required.

Question 10

Where are HMAC key permissions applied?

*hash-based message authentication code (HMAC) keys, which you can use to authenticate requests to Cloud Storage.

Answer 10

HMAC key permissions apply at the project level only.

Question 11

What is needed to create or updated multi-part uploads?

Answer 11

In order to create and/or upload parts, you must have both storage.objects.create and storage.multipartUploads.create permission.

Question 12

storage.objects.create

Answer 12

Add new objects to a bucket.

Question 13

storage.objects.delete

Answer 13

Delete objects.

Question 14

storage.objects.get

Answer 14

Read object data and metadata, excluding ACLs.

Question 15

storage.objects.getIamPolicy

Answer 15

Read object ACLs, returned as IAM policies.

Question 16

storage.objects.list

Answer 16

List objects in a bucket. Also read object metadata, excluding ACLs, when listing.

Question 17

storage.objects.setIamPolicy

Answer 17

Update object ACLs.

Question 18

storage.hmacKeys.create

Answer 18

Create new HMAC keys for service accounts in a project.

Question 19

storage.hmacKeys.delete

Answer 19

Delete existing HMAC keys.

Question 20

storage.hmacKeys.get

Answer 20

Read HMAC key metadata.

Question 21

storage.hmacKeys.list

Answer 21

List the metadata of HMAC keys in a project.

Question 22

storage.hmacKeys.update

Answer 22

Update HMAC key status.

Question 23

storage.multipartUploads.create

Answer 23

Upload objects in multiple parts.

Question 24

storage.multipartUploads.abort

Answer 24

Abort multipart upload sessions.

Question 25

storage.multipartUploads.listParts

Answer 25

List the uploaded object parts in a multipart upload session.

Question 26

storage.multipartUploads.list

Answer 26

List the multipart upload sessions in a bucket.