Answer-first summary for fast verification
Answer: Configure a Cloud Storage bucket permission that gives allUsers the Storage Legacy Object Reader role.
The HTTP 403 error indicates a permissions issue where Cloud CDN cannot access the private Cloud Storage object. The USE_ORIGIN_HEADERS cache mode respects the origin's Cache-Control header, but the core problem is access. The bucket is private, so Cloud CDN requires explicit permissions to serve the object. While the recommended approach is to grant the CDN service account Storage Object Viewer permissions, the provided options do not include this. Option C resolves the issue by making the object publicly accessible via allUsers with the Storage Legacy Object Reader role, allowing Cloud CDN to serve it. Other options (A, B, D) address caching behavior but do not fix the 403 error.
Author: LeetQuiz Editorial Team
Ultimate access to all questions.
No comments yet.
To serve the static image file https://www.example.com/images/spacetime.png from a private Cloud Storage bucket using Cloud CDN with USE_ORIGIN_HEADERS cache mode, you encounter an HTTP 403 error. The HTTP response includes the header Cache-Control: private, max-age=0. How do you resolve this issue?
A
Enable negative caching for the backend bucket.
B
Change the cache mode to Force cache all content.
C
Configure a Cloud Storage bucket permission that gives allUsers the Storage Legacy Object Reader role.
D
Increase the default time-to-live (TTL) for the backend service.