Launching a job on Dataflow requires storage.bucket.get permission
Open
gcp
improvement
io
java
P3
- Dominant language
- Java
- Stars
- 8.7k
- Forks
- 4.7k
- Avg merge
- 1d 20h
- Merged PRs (30d)
- 196
Description
The storage.bucket.get permission is not covered by storage object admin, so this is an extra property requirement.
It is possible to verify the existence of a GCS bucket by writing to it. It would be good to ensure Beam doesn't require such high permissions.
Imported from Jira [BEAM-11430](https://issues.apache.org/jira/browse/BEAM-11430). Original Jira may contain additional context.
Reported by: pabloem.
Contributor guide
Assessment
This issue has not been assessed yet.