Expand description
Authoritatively manages the default object ACLs for a Google Cloud Storage bucket without managing the bucket itself.
Note that for each object, its creator will have the
"OWNER"
role in addition to the default ACL that has been defined.
For more information see the official documentation and API.
Want fine-grained control over default object ACLs? Use
gcp.storage.DefaultObjectAccessControl
to control individual role entity pairs.
§Example Usage
Example creating a default object ACL on a bucket with one owner, and one reader.
resources:
image-store:
type: gcp:storage:Bucket
properties:
name: image-store-bucket
location: EU
image-store-default-acl:
type: gcp:storage:DefaultObjectACL
properties:
bucket: ${["image-store"].name}
roleEntities:
- OWNER:user-my.email@gmail.com
- READER:group-mygroup
§Import
This resource does not support import.
Structs§
- Use builder syntax to set the inputs and finish with
build_struct()
.
Functions§
- Registers a new resource with the given unique name and arguments