GCP Associate Cloud Engineer Practice Question 40: Uniform Bucket Level Access ACL
Google Cloud Associate Cloud Engineer · Test 4 · question 10 of 10
A bucket serves public product images. Each object had an ACL granting READER to allUsers. After an administrator enabled uniform bucket-level access on the bucket, the image URLs on the website started returning 403 errors, and no objects were changed.
What is the cause, and how do you restore access with the least effort?
Show answer and explanation
Answer:
With uniform bucket-level access, access is controlled only by IAM, and object and bucket ACLs are ignored (they are kept, but have no effect). The public read that came from the ACLs therefore stopped. Granting roles/storage.objectViewer to allUsers on the bucket restores public reads through IAM in one step. (You can also turn the setting off again within 90 days of enabling it.)
Option A is wrong because enabling the setting does not change storage classes. Option C is wrong because the site's access was public through the ACL and not through a service account; the error is the absence of a public IAM binding. Option D fails because the ACLs still exist, and ACL changes are rejected when uniform bucket-level access is on.
Reference: Uniform bucket-level access