Professional Cloud DeveloperDemo

By Google · Question Mode

QuestionQ262

Integrating applications with Google Cloud services

You are building a secure document-sharing platform. The platform enables users to share documents with other users, who might be external to their organization. Access to these documents must be revoked after a configurable period of time. The documents are stored in Cloud Storage. How should Cloud Storage be configured to support this functionality?

  • A Create signed policy documents on the Cloud Storage bucket.
  • B Apply access control list (ACL) permissions to the Cloud Storage bucket.
  • C Generate a signed URL for each document the user wants to share.
  • D Grant the Storage Object Viewer IAM role to all authenticated users.
Explanation

A signed URL grants time-limited access to a specific Cloud Storage object and includes an expiration time. It can be shared with external recipients without granting them ongoing bucket-level IAM or ACL permissions. Signed policy documents are intended to control uploads, not to provide time-limited access to existing documents.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!