google_storage_object_acl

Creates a new object ACL in Google cloud storage service (GCS). For more information see the official documentation and API.

Example Usage

Create an object ACL with one owner and one reader.

resource "google_storage_bucket" "image-store" {
  name     = "image-store-bucket"
  location = "EU"
}

resource "google_storage_bucket_object" "image" {
  name   = "image1"
  bucket = "${google_storage_bucket.image-store.name}"
  source = "image1.jpg"
}

resource "google_storage_object_acl" "image-store-acl" {
  bucket = "${google_storage_bucket.image-store.name}"
  object = "${google_storage_bucket_object.image.name}"

  role_entity = [
    "OWNER:[email protected]",
    "READER:group-mygroup",
  ]
}

Argument Reference

• bucket - (Required) The name of the bucket it applies to.

• object - (Required) The name of the object it applies to.

• predefined_acl - (Optional) The canned GCS ACL to apply. Must be set if role_entity is not.

• role_entity - (Optional) List of role/entity pairs in the form ROLE:entity. See GCS Object ACL documentation for more details. Must be set if predefined_acl is not.

Attributes Reference

Only the arguments listed above are exposed as attributes.