IAM ?
New feature. ACL via IAM on specific bucket.
gsutil
gsutil iam ...
IAM config not appears in gsutil acl
VS legacy ACL
Legacy ... bucket policy effects on bucket itself. Not apply to Object
e.g User A,B is bucket `hoge`s owner @legacy acl
A create hoge/a.txt OK
B create hoge/b.txt OK
B delete hoge/a.txt NG (becaz a.txt 's ACL not allow B's ops)
IAM ... IAM policy apply to not only objects but also buket.
e.g User A,B is bucket `hoge`s owner @IAM
A create hoge/a.txt OK
B create hoge/b.txt OK
B delete hoge/a.txt OK (becaz IAM nothing to do with object acl)
2017-06-16's DC
We can set legacy bucket ACL. But can not set default ACL..
If you want to set default ACL, use gsutil
GCS access for Non project member
https://console.developers.google.com/storage/[bucketname]/
↑ old now redirect to
https://console.cloud.google.com/storage/browser/[bucketname/