Limiting the scope of permissions for GCS backups

Elastic Stack Elasticsearch
1

According to the docs, the storage.Admin role needs to be granted to the GCP service account that will be used for GCS snapshotting.

However, (unless I am mistaken) this is a rather broad role giving full access to all GCS buckets of the corresponding GCP project.

Is there an option to just use a role with full permissions to the bucket where the snapshots will be stored in?

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.