Pub/Sub notifications

[Mohammad Youssuf]

Hi ,

I have some questions regarding Pub/Sub updates. They are as follows:

1. What Is the best way to test Pub/Sub?
2. If a user from the GMB platform is updating location status(verified/not verified) do we get notification from Pub/ sub, if yes, how? 

3. How long it takes to receive from Pub/Sub notifications re changes?   

I would highly appreciate relevant feedback at the earliest.

Best regards,

[Jadid (Google Cloud Platform Support)]

Hello,

1.You can develop and test your application locally with the Pub/Sub emulator which provides local emulation of Pub/Sub service using gcloud command-line tool [1].

2.You can set a Pub/Sub topic where notification can be published when a location is updated or has a new review [2].

3.Would you please clarify what you mean by “Pub/Sub notifications re changes”?

[1]https://cloud.google.com/pubsub/docs/emulator

[2]https://developers.google.com/my-business/reference/rest/v4/Notifications

[Joshua Fox]

Why is there a command gcloud pubsub subscriptions set-iam-policy ? In general IAM is set through IAM interfaces, so why a special interface inside the PubSub API?

 

[Joshua Fox]

I got an answer at the GCP Slack. 

It is for fine-grained permissions. Without this, using the IAM API, a given account would  have to be given full project-wide access at minimum, but with this interface, we can give it access to a single subscription, for example.

On Mon, Dec 28, 2020 at 2:13 PM Joshua Fox <jos...@doit-intl.com> wrote:

Why is there a command gcloud pubsub subscriptions set-iam-policy ? In general IAM is set through IAM interfaces, so why a special interface inside the PubSub API?

 

--

Joshua Fox // DoIT International | Senior Architect | IL: +972 (0545) 69 1165

[Monica (Google Cloud Platform)]

Indeed, granting minimum permissions on the projects' resources it's a must as to respect the least privilege policy security enhancement.

See here Sample use case: cross-project communication for more information and some code examples that demonstrate how to use Pub/Sub's Identity and Access Management features.

The security of the projects it's a top priority for us. Also address these documents [1] [2] [3] with overall GCP security best practices.

[Kir Titievsky]

To answer the "why" question: The "modern" way to do fine grained permissions on GCP  is IAM conditions.  Pub/Sub was built before that system was available so we had to do it in a less general way.  

--
You received this message because you are subscribed to the Google Groups "Google Cloud Pub/Sub Discussions" group.
To unsubscribe from this group and stop receiving emails from it, send an email to cloud-pubsub-dis...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/cloud-pubsub-discuss/537529f3-c1c3-4d42-8b39-2d58668a6fd2n%40googlegroups.com.

--

Kir Titievsky | Product Manager | Google Cloud Pub/Sub 

[Joshua Fox]

Thank you, Kir, 

Although the answer I got earlier about the need for fine-grained permissions was correct, your answer addresses my puzzlement that something looked unusual.   

To view this discussion on the web visit https://groups.google.com/d/msgid/cloud-pubsub-discuss/CAKdozMf5ftAvVdiNGi6XFC%3DE7%3DyQh1OEHDLUjvVBqnPmkD6caQ%40mail.gmail.com.