> For the complete documentation index, see [llms.txt](https://annotationdocs.telusinternational.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://annotationdocs.telusinternational.com/secure-attachment-access/gcp-iam-access.md).

# Google Cloud Storage

If you use Google Cloud Storage (GCS) to store data, you can send attachments as `https:` or `http:` URLs. You can also send attachments as `gs:` [protocol URIs](https://cloud.google.com/storage/docs/gsutil) which look like `gs://bucket/key`.

To access private GCS objects, We use **Cross-Project Access**.

## **Cross-project Access**

We will fetch attachments from your GCS bucket, using our GCP service account `ti-it-sa-gtstudio@ti-ai-computervision-prod.iam.gserviceaccount.com`. You will need to grant access to TELUS International on a per-bucket basis using [Cloud IAM permissions](https://cloud.google.com/storage/docs/access-control/using-iam-permissions) or set permissions on objects [using ACLs](https://cloud.google.com/storage/docs/access-control/create-manage-lists).

#### An example on how to provide access to a particular folder inside the bucket using ACLs

Install and set up gsutil - <https://cloud.google.com/storage/docs/gsutil_install> and run the below command

```
gsutil acl ch -r \
  -u ti-it-sa-gtstudio@ti-ai-computervision-prod.iam.gserviceaccount.com:O \
  gs://example-bucket/folder/ 
```

For more info on how to control access to the buckets and objects in GCS using ACLs, please refer this [doc](https://cloud.google.com/storage/docs/gsutil/commands/acl).&#x20;