Cloud Storage Security Rules update from Firebase Summit #Shorts
summary
Cloud Storage security rules now call Firestore.get() and Firestore.exists() so rules read user roles stored in Firestore and enforce Authorized user only file access server-side. This removes duplicated logic across Firestore and Storage: write access levels once in Firestore and have Storage rules consult them at request time. The change makes flexible, centralized access control possible and demonstrably works with the existing Firebase Security Rules engine.
AI-written summary · about
related talks
21mServerless security modeling in Firebase
25mFive tips to secure your app
13mSecure your Firebase app from the start
40mThree New Ways to Secure Your App with Firebase Authentication
49mGoogle Cloud Storage - Building Systems with Security by Design and Default
19mFoundations of data security
38mSecuring Amazon S3 with guardrails and fine-grained access controls
01h 02mStrong security made simple: Putting all the pieces together