QuestionQ84

Designing for security and compliance

As part of its new application experience, Dress4Wm lets customers upload images of themselves.

Each customer has exclusive control over who can view these images.

Customers must be able to upload images with minimal latency and see their images quickly on the main application page when they log in.

Which configuration should Dress4Win use?

  • A Store image files in a Google Cloud Storage bucket. Use Google Cloud Datastore to maintain metadata that maps each customer's ID and their image files.
  • B Store image files in a Google Cloud Storage bucket. Add custom metadata to the uploaded images in Cloud Storage that contains the customer's unique ID.
  • C Use a distributed file system to store customers' images. As storage needs increase, add more persistent disks and/or nodes. Assign each customer a unique ID, which sets each file's owner attribute, ensuring privacy of images.
  • D Use a distributed file system to store customers' images. As storage needs increase, add more persistent disks and/or nodes. Use a Google Cloud SQL database to maintain metadata that maps each customer's ID to their image files.
Explanation

Cloud Storage is a managed object store suited to storing and serving image files. Firestore in Datastore mode provides a scalable, high-performance NoSQL store for application data, so it can maintain an efficient customer-ID-to-image-object mapping for fast retrieval at login. Custom object metadata is descriptive data rather than an access-control mechanism; viewing rights must be enforced through the application and Cloud Storage IAM or ACL configuration.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!