External content provider: Google Cloud storage

Create Google Cloud storage bucket

This section describes how to create and configure a new Google Cloud Storage Bucket. Please follow the steps below:

1. Open a web browser and log into the Google Cloud Console.

2. In the left menu, navigate to Storage>Browser.

3. Select Create Bucket.

4. Create a bucket by following the Create Bucket step-by-step process.

Create API credentials

1. From the left menu, navigate to APIs and Services>Credentials.

2. Select Create Credentials on the Credentials page.

3. Choose API key from the dropdown menu. The API key will be used within the configuration of the Google Cloud Storage ECP.

4. After the API key is created and displayed, select Restrict Key.

5. Set the API key’s Application restrictions and API restrictions.

6. If an application restriction is configured, HTTP referrers is required for RPI to connect to Google Cloud Storage. For API restriction, make sure Cloud Storage, Cloud Storage API, and Google Cloud Storage JSON API restrictions are checked.

Create an OAuth client ID

1. Select the Create Credentials button on the Credentials page.

2. Choose OAuth client ID from the drop-down menu.

3. On the Create OAuth client ID page, select Web application as the application type.

4. Provide a name for your ID and set an authorized redirect URI. Make sure that the redirect URI has been added to the Authorized Domains list. This can be configured in the OAuth consent settings page.

5. Select the Create button to finish the step. The Client ID, Client Secret, and Redirect URI will be used within the configuration of the Google Cloud Storage ECP.

Set the IAM permissions

Set the IAM permissions for Cloud Storage.

1. From the main menu, navigate to IAM & Admin>Roles.

2. Select Create Role.

3. Specify the Title and ID of the role.

4. Select the Add Permissions button.

5. In the Permissions dialog, filter for “storage.buckets”. Check the following permissions:

   • storage.buckets.create

   • storage.buckets.delete

   • storage.buckets.get

   • storage.buckets.list

6. Select Add.

7. Filter for “storage.objects”. Check the following permissions:

   • storage.objects.create

   • storage.objects.get

   • storage.objects.list

   • storage.objects.delete

8. Select Add. The role should now list the permissions selected above. If incomplete, select the Add Permissions button again to reselect the missing permissions.

9. At the menu on the left, select IAM. Assign the created role to the user that will be using Google Cloud Storage.

Additional resources

• Best practices: Google Cloud Storage