GCP Bucket Target Permissions

Permissions required to add GCP bucket target in T4K

To add GCP bucket as target within T4K, specific bucket permissions are required. Following are the steps to add the permissions:

Steps:

• Create a custom role with following permissions

# permission list
storage.objects.create
storage.objects.delete
storage.objects.get
storage.objects.list
storage.objects.update

# GCloud command
gcloud iam roles create <ROLE-NAME> --project=<PROJECT-ID> \
    --title="tvk-gcp-target-role" --description="Role with required GCP bucket access for T4K target" \
    --permissions="storage.objects.create,storage.objects.delete,storage.objects.get,storage.objects.list,storage.objects.update" --stage=GA

• Associate the created role with a service account whose access key and secret key is going to be used while creating target in T4K

• If a service account does not have access key and secret key, follow this guide to generate a new access key and secret key which will be required while creating target.