Skip to content

Commit 251c5fc

Browse files
authored
Update IAM role for Cloudflare access to GCS bucket
There is no need for objectAdmin, when all logpush does is to push to GCS. ## Reference https://cloud.google.com/storage/docs/access-control/iam-roles#storage.objectCreator https://cloud.google.com/storage/docs/access-control/iam-roles#storage.objectAdmin
1 parent 63541ab commit 251c5fc

File tree

1 file changed

+3
-3
lines changed

1 file changed

+3
-3
lines changed

src/content/docs/logs/logpush/logpush-job/enable-destinations/google-cloud-storage.mdx

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -22,7 +22,7 @@ Cloudflare Logpush supports pushing logs directly to Google Cloud Storage (GCS)
2222
- **Bucket** - GCS bucket name
2323
- **Path** - bucket location within the storage container
2424
- **Organize logs into daily subfolders** (recommended)
25-
- For **Grant Cloudflare access to upload files to your bucket**, make sure your bucket has added Cloudflare’s IAM as a user with a [Storage Object Admin role](https://cloud.google.com/storage/docs/access-control/iam-roles).
25+
- For **Grant Cloudflare access to upload files to your bucket**, make sure your bucket has added Cloudflare’s IAM as a user with a [Storage Object Creator role](https://cloud.google.com/storage/docs/access-control/iam-roles).
2626

2727
When you are done entering the destination details, select **Continue**.
2828

@@ -44,12 +44,12 @@ When you are done entering the destination details, select **Continue**.
4444

4545
## Create and get access to a GCS bucket
4646

47-
Cloudflare uses Google Cloud Identity and Access Management (IAM) to gain access to your bucket. The Cloudflare IAM service account needs admin permission for the bucket.
47+
Cloudflare uses Google Cloud Identity and Access Management (IAM) to gain access to your bucket. The Cloudflare IAM service account needs object creator permission for the bucket.
4848

4949
<Render file="enable-read-permissions" product="logs" /> <br />
5050

5151
To enable Logpush to GCS:
5252

5353
1. Create a GCS bucket. Refer to [instructions from GCS](https://cloud.google.com/storage/docs/creating-buckets#storage-create-bucket-console).
5454

55-
2. In **Storage** > **Browser** > **Bucket** > **Permissions**, add the member `[email protected]` with `Storage Object Admin` permission.
55+
2. In **Storage** > **Browser** > **Bucket** > **Permissions**, add the member `[email protected]` with `Storage Object Creator` permission.

0 commit comments

Comments
 (0)