Professional Cloud DeveloperDemo

By Google · Question Mode

QuestionQ327

Integrating applications with Google Cloud services

You are developing a new customer-facing help-desk chat service built on Cloud Run. Customers use the chat feature on your website to obtain support. The application stores each transcript as a text file with a unique identifier in a Cloud Storage bucket. After a conversation ends and before the chat window closes, the customer is given a link to the chat transcript.

You want the chat transcript link to be accessible for 2 hours. You need to configure this access using an approach that prioritizes security and follows Google-recommended practices. What should you do?

  • A Set the ACL permission on the Cloud Storage bucket. Set the permission of each text file to allUsers with READER access. Delete each text file 2 hours after itis created.
  • B Set the permission on the Cloud Storage bucket with the text files to allUsers. Delete each text file 2 hours after itis created.
  • C Create a new Cloud Storage bucket for each user. Grant the user access to the bucket with a conditional IAM role that expires after 2 hours.
  • D Create a signed URL for each text file that expires after 2 hours.
Explanation

A Cloud Storage signed URL provides time-limited, narrowly scoped access to a specific object without making the bucket or object public or requiring the recipient to have a Google account. Creating a signed URL for the transcript with a two-hour expiration grants only the required temporary read access. Google recommends signed URLs for securely sharing content with users who do not have accounts while controlling the access duration.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!