Referencing Manage Environment Ops Authing▸, when using the AutoMQ Cloud BYOC product, the AutoMQ service provider requires users to provide the appropriate operational authorization. Users can grant cross-account access to the Ops Bucket, where AutoMQ stores logs and monitoring data, enabling AutoMQ to deliver 24/7 monitoring and governance for the customer’s production environment. This document explains how to configure managed operational authorization on Google Cloud GCS.
In this document, references to the AutoMQ product service provider, AutoMQ service provider, and AutoMQ all specifically mean AutoMQ HK Limited.

​
Google Cloud Environment Authorization

GCS on Google Cloud offers a web interface and simplified policy authorization.

​
Console Operational Steps

Log in to the cloud account that owns the Ops Bucket and switch to the corresponding Project. Then navigate to the GCS Console:
  1. Navigate to the Bucket List page to find the target OpsBucket. Access the GCS Console and click the Bucket List in the left navigation bar to enter the list page. Search for the operations Bucket configured in the current environment, and click on details.
  1. Go to Permission Management > Add Authorization. Click the add authorization button to open the form for new authorization.
  1. Add the Bucket Authorization Policy according to the template information. Refer to the following instructions to fill in the respective authorization information, click confirm, and complete the authorization policy creation.
    • Authorized main account: Refer to the Authorization Principle section of this document and select the AutoMQ service-side service account “[email protected]”.
    • Bound Role: Choose the Storage Object User role.