- 필수 기능
- 시작하기
- Glossary
- 표준 속성
- Guides
- Agent
- 통합
- 개방형텔레메트리
- 개발자
- API
- Datadog Mobile App
- CoScreen
- Cloudcraft
- 앱 내
- 서비스 관리
- 인프라스트럭처
- 애플리케이션 성능
- APM
- Continuous Profiler
- 스팬 시각화
- 데이터 스트림 모니터링
- 데이터 작업 모니터링
- 디지털 경험
- 소프트웨어 제공
- 보안
- AI Observability
- 로그 관리
- 관리
Uniform bucket-level access is enabled on Cloud Storage buckets.
You should use uniform bucket-level access to unify and simplify how you grant access to your Cloud Storage resources. Cloud Storage offers two systems for granting users permission to access your buckets and objects:
These systems act in parallel. A user needs only one of the systems to grant them permission in order to access a Cloud Storage resource.
To facilitate maintaining consistent permissions, Cloud Storage provides an option called Uniform bucket- level access. Using this feature disables ACLs for all Cloud Storage resources. Access to
Cloud Storage resources then is granted exclusively through Cloud IAM. Enabling uniform bucket-level access guarantees that if a Storage bucket is not publicly accessible, no object in the bucket is publicly accessible either.
If you enable uniform bucket-level access, you revoke access from users who gain their access solely through object ACLs. Certain Google Cloud services, such as Stackdriver, Cloud Audit Logs, and Datastore, cannot export to Cloud Storage buckets that have uniform bucket-level access enabled.
Run the following command:
`gsutil uniformbucketlevelaccess set on gs://BUCKET_NAME/`
Set up an Organization Policy to enforce that any new bucket has uniform bucket-level access enabled. Read more about Organization Policy constraints.
By default, Cloud Storage buckets do not have uniform bucket-level access enabled.
Uniform bucket-level access cannot be disabled if it has been active on a bucket for 90 consecutive days.
Version 8, 3.3 - Configure Data Access Control Lists