Bird
0
0

You want to verify if a user can delete objects in a Cloud Storage bucket using Policy Troubleshooter. Which combination of inputs should you provide?

hard📝 Best Practice Q15 of 15
GCP - Cloud IAM Advanced
You want to verify if a user can delete objects in a Cloud Storage bucket using Policy Troubleshooter. Which combination of inputs should you provide?
AUser email, permission <code>storage.objects.list</code>, and bucket resource name
BUser email, permission <code>storage.buckets.create</code>, and project ID
CUser email, permission <code>storage.objects.delete</code>, and bucket resource name
DUser password, permission <code>storage.objects.delete</code>, and bucket resource name
Step-by-Step Solution
Solution:
  1. Step 1: Identify the permission to check

    To check delete access on objects, use the permission storage.objects.delete.
  2. Step 2: Provide correct user and resource

    Use the user's email (not password) and the specific bucket resource name to check access.
  3. Final Answer:

    User email, permission storage.objects.delete, and bucket resource name -> Option C
  4. Quick Check:

    Correct permission and resource for delete check = D [OK]
Quick Trick: Match permission exactly to action you want to check [OK]
Common Mistakes:
  • Using wrong permission for delete action
  • Providing user password instead of email
  • Using project ID instead of bucket resource

Want More Practice?

15+ quiz questions · All difficulty levels · Free

Free Signup - Practice All Questions
More GCP Quizzes