Correct Answer: IAM roles apply to a bucket and its objects as a whole; ACLs can be applied to individual objects
IAM is the recommended way to manage access at the bucket level. ACLs offer legacy, fine-grained control at the individual object level but are generally less manageable at scale....
Correct Answer
IAM roles apply to a bucket and its objects as a whole; ACLs can be applied to individual objects
Why This Answer Is Correct
IAM is the recommended way to manage access at the bucket level. ACLs offer legacy, fine-grained control at the individual object level but are generally less manageable at scale.
This question evaluates your knowledge of Google Cloud Storage — a core concept tested in Professional Cloud Architect. Understanding Google Cloud Storage is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.
You need to host a static website (HTML, CSS, JS) with the lowest possible cost and high durability. You do not need server-side processing. Which storage solution should you choose?
You need to grant developers read-only access to Google Cloud Storage buckets without giving them access to other services. What's the best approach using Cloud IAM?
An enterprise wants to enforce a policy that all Cloud Storage buckets created in the organization must have 'Uniform Bucket-Level Access' enabled to prevent accidental exposure of individual objects. How should they implement this?
You are migrating a 1 PB dataset of medical images to Cloud Storage. The data is currently on-premises and must be moved as quickly as possible. You have a 1 Gbps internet connection. What is the most feasible way to migrate ?
You are hosting a website on Cloud Storage. You want to use a custom domain name (e.g., www.example.com) and serve content over HTTPS. What is the architecture to achieve this?