hands-on lab

Granting Access to Google Cloud Storage Objects with Signed URLs

Difficulty: Intermediate

Duration: Up to 45 minutes

Students: 1,028

Rating: 4.5/5

Start lab

Get guided in a real environmentPractice with a step-by-step scenario in a real, provisioned environment.

Learn and validateUse validations to check your solutions every step of the way.

See resultsTrack your knowledge and monitor your progress.

Description

Signed URLs are URLs with query string authentication parameters that grant access to buckets and objects stored in Google Cloud Storage. Signed URLs grants access to Cloud Storage for a given amount of time. Anyone with the signed URL can access the objects until the signed URL expires. This is particularly useful for granting access to individuals outside of your organization.

In this lab, you will learn the mechanics of creating signed URLs using the gcloud CLI. You will also fully understand the capabilities and limitations of signed URLs.

Lab Objectives

Upon completion of this lab you will be able to:

Explain when signed URLs are the right choice among the alternatives for granting access to Google Cloud Storage object
Understand the requirements for generating signed URLs
Use signed URLs to grant access to Google Cloud Storage objects for a limited time
Revoke access to Google Cloud Storage objects accessed via a signed URL
Debug common issues related to creating signed URLs