[BEAM-11430] Launching a job on Dataflow requires storage.bucket.get permission

• Type: Improvement
• Status: Open
• Priority: P3
• Resolution: Unresolved
• Component/s: io-java-gcp
• Assignee: Unassigned
• Reporter: Pablo Estrada
• Created: 09/Dec/20 23:22
• Updated: 04/Jun/22 19:02

Description

The storage.bucket.get permission is not covered by storage object admin, so this is an extra property requirement.

 

It is possible to verify the existence of a GCS bucket by writing to it. It would be good to ensure Beam doesn't require such high permissions.