プライベートデータストレージとしてのGCS

The service account used to generate a signed URL must have permission to perform the operation that the URL allows.

Depending on the required access, you can assign these predefined Google Cloud roles or create a custom role with equivalent permissions:

The applicable permissions include:

These signed URL permissions supplement the permissions already required to use GCS as Private Data Storage.

Signed URL transfers originate from the user's browser. Configure Cross-Origin Resource Sharing (CORS) on the Default Bucket to allow requests from the Alteryx One environment.

Create a JSON file named cors-config.json with this configuration:

[
  {
    "origin": [
      "https://{platformEnvironment}"
    ],
    "method": [
      "GET",
      "PUT",
      "POST",
      "HEAD",
      "DELETE"
    ],
    "responseHeader": [
      "Content-Type",
      "Content-Length",
      "Content-Range",
      "x-goog-resumable",
      "Location",
      "Range",
      "x-goog-generation",
      "x-goog-metageneration",
      "ETag"
    ],
    "maxAgeSeconds": 3600
  }
]

Replace {platformEnvironment} with the origin of your Alteryx One environment. For example:

https://us1.alteryxcloud.com

Enter only the origin. Don’t include a workspace name, workspace path, or trailing slash.

Apply the CORS configuration to the Default Bucket with one of these commands.

Replace {defaultBucket} with the name of the GCS bucket configured as the Default Bucket in Alteryx One.