Google Cloud CreateBucketIamPolicy
CertifiedAdd IAM binding to a GCS bucket
Google Cloud CreateBucketIamPolicy
Certified
Add IAM binding to a GCS bucket
Adds a role/member binding to a bucket policy. Can error or skip when the binding already exists.
yaml
type: io.kestra.plugin.gcp.gcs.CreateBucketIamPolicyExamples
Add role to a service account on a bucket
yaml
id: gcp_gcs_create_bucket_iam_policy
namespace: company.team
tasks:
- id: create_bucket_iam_policy
type: io.kestra.plugin.gcp.gcs.CreateBucketIamPolicy
name: "my-bucket"
member: "serviceAccount:sa@project.iam.gserviceaccount.com"
role: "roles/storage.admin"
Properties
member *Requiredstring
Member
IAM member string, e.g., user: alice@example.com or serviceAccount: sa@project.iam.gserviceaccount.com
name *Requiredstring
Bucket name
role *Requiredstring
Role
IAM role to grant (e.g., roles/storage.objectViewer)
ifExists string
Default
SKIPPossible Values
ERRORSKIPExisting binding policy
ERROR or SKIP when the role/member already exists; default SKIP
impersonatedServiceAccount string
The GCP service account to impersonate
pluginDefaultsRef Non-dynamicstring
Reference (ref) of the pluginDefaults to apply to this task.
projectId string
The GCP project ID
scopes array
SubTypestring
Default
["https://www.googleapis.com/auth/cloud-platform"]The GCP scopes to be used
serviceAccount string
The GCP service account
Outputs
bucket string
Bucket name
created boolean
Created
True if the binding was added; false if it already existed
member string
Member
role string
Role
