Answer-first summary for fast verification
Answer: Generate a signed URL for each document the user wants to share.
The correct answer is generating a signed URL for each document. Signed URLs provide time-limited access to specific Cloud Storage objects. When generating the URL, an expiration time can be configured, after which the URL becomes invalid, automatically revoking access. This aligns with the requirement to revoke access after a configurable period. Other options are unsuitable: - **A (signed policy documents)** applies to buckets and multiple objects, which is overkill for per-document sharing. - **B (ACLs)** lack built-in time-based revocation. - **D (IAM role to all authenticated users)** grants overly broad access without time constraints.
Author: LeetQuiz Editorial Team
Ultimate access to all questions.
How can you configure Cloud Storage to enable secure document sharing with external users while automatically revoking access after a configurable time period in a document sharing platform?
A
Create signed policy documents on the Cloud Storage bucket.
B
Apply access control list (ACL) permissions to the Cloud Storage bucket.
C
Generate a signed URL for each document the user wants to share.
D
Grant the Storage Object Viewer IAM role to all authenticated users.
No comments yet.