首页 > 解决方案 > 无法从 VM 实例写入 Google Cloud 存储

问题描述

我正在尝试在我的 GCP VM 实例上运行以下代码。

!gsutil cp 'text.csv' 'gs://BucketName/folderName/'

我收到错误消息AccessDeniedException: 403 XXXXXXX-compute@developer.gserviceaccount.com does not have storage.objects.list access to mybucket

我已尝试编辑 IAM 访问权限并为服务帐户授予存储管理员权限,但我仍然无法解决此问题。

我还运行以下检查:

$ gcloud projects get-iam-policy Project-ID
bindings:
- members:
  - serviceAccount:service-XXXXX@compute-system.iam.gserviceaccount.com
  role: roles/compute.serviceAgent
- members:
  - serviceAccount:XXXXX-compute@developer.gserviceaccount.com
  - serviceAccount:XXXXX@cloudservices.gserviceaccount.com
  - serviceAccount:service-XXXXX@sourcerepo-service-accounts.iam.gserviceaccount.com
  - user:myemail@company.com
  role: roles/owner
- members:
  - user:mycolleagueemail@company.com
  role: roles/resourcemanager.projectOwnerInvitee
- members:
  - serviceAccount:service-XXXX@sourcerepo-service-accounts.iam.gserviceaccount.com
  role: roles/sourcerepo.serviceAgent
- members:
  - serviceAccount:XXXXX-compute@developer.gserviceaccount.com
  - serviceAccount:XXXXXX@cloudservices.gserviceaccount.com
  - serviceAccount:service-XXXXX@compute-system.iam.gserviceaccount.com
  - serviceAccount:service-XXXXXX@sourcerepo-service-accounts.iam.gserviceaccount.com
  - user:myemail@company.com
  role: roles/storage.admin
etag: BwWHPRO76cr=
version: 1

我对 GCP 很陌生,所以任何建议/帮助将不胜感激。谢谢!

标签: google-cloud-platform

解决方案


推荐阅读