GCP App Engine Access to GCloud Storage without sharing publicly

Question

In order to serve information from Google Cloud Storage without configuring the bucket's rights to "share publicly," I need to know how to grant a Google Cloud Platform App Engine project access.

Node JS is being used in my App engine project. I do not wish to set access on an individual user level using IAM because it uses Passport-SAML authentication to verify users before enabling them to view information. Currently, my app's private folder, which is only accessible after users have authenticated, is where images and videos are served. I want to transfer these assets to Google Cloud Storage so that the app may read the files without giving everyone access to them. How do I approach this?

Answer 1

I believe that https://cloud.google.com/storage/docs/access-control/create-signed-urls-program will work for you. I can't seem to locate the Node.js API documentation (google is really messing around with their doc urls). Here is a snippet of code:

bucket.upload(filename, options, function(err, file, apiResponse) {
var mil = Date.now()+60000;
var config = {
  action: 'read',
  expires: mil
};

file.getSignedUrl(config, function(err, url) {
  if (err) {
    return;
  }
  console.log(url);
});