GCS Reader initial setup
You must review the prerequisites, permissions and authentication requirements and connection properties before you set up the connection.
Prerequisites
The following prerequisites are needed before configuring the GCS Reader:
Service account: To access Google Cloud Storage you need valid user credentials with authorization.
To use the GCSAuditLogNotification object detection mode, you must configure the audit log and users with necessary permission to access the logs.
Setting up Google Cloud Storage permissions
You must configure the following Google Cloud Storage permissions depending on which object detection modes you will use:
To enable reading files from Google Cloud Storage, you must create a custom Google Cloud Storage role with get and list permissions and assign it to your Service Account.
To enable reading the audit log on Google Cloud Storage, you must enable the audit log and grant audit log permissions to your custom role.
If audit log access is needed, check the Data Write property to enable the audit log on GCS.
Create a custom role with the following permissions:
GCS permissions:
storage.objects.getandstorage.objects.listGCS audit log permissions (if Audit Log access needed):
logging.logEntries.listandlogging.privateLogEntries.list
Create a Service Account and assign this custom role.
Generate the Service Account key in JSON format.
In your Striim GCS Reader configuration, copy the downloaded JSON key path to the
Service Account Keyproperty.
Configuring Striim to work with GCS Reader
All clients and drivers required by GCS are bundled with Striim. No additional setup is required.