如何从 acl 控件禁用谷歌云存储桶列表? [英] How to disable google cloud storage bucket list from acl control?

问题描述

We're using google cloud storage as our CDN.

However, any visitors can list all files by typing: http://ourcdn.storage.googleapis.com/

How to disable it while all the files under the bucket is still public readable by default?

We previously set the acl using

gsutil defacl ch -g AllUsers:READ 

解决方案

In GCP dashboard：

1. get in your bucket
2. click "Permissions" tab and get in.
3. in member list find "allUsers", change role from Storage Object Viewer to Storage Legacy Object Reader

then, listing should be disabled.

Update:

as @Devy comment, just check the note below here

Note: roles/storage.objectViewer includes permission to list the objects in the bucket. If you don't want to grant listing publicly, use roles/storage.legacyObjectReader.

这篇关于如何从 acl 控件禁用谷歌云存储桶列表?的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！