Nick, That was it -- many thanks! To recap, my error was in not realizing that <app-id>@appspot.gserviceaccount.com had to be added in "IAM & Admin" screen in the console.
On Friday, May 20, 2016 at 1:48:07 PM UTC-4, Nick (Cloud Platform Support) wrote: > > Hey Alexey, > > Thanks for your patience, I just got a chance to view this thread now. > From the 403 response, it appears the credentials aren't passing the ACL of > the bucket. If you create a bucket within a project, it doesn't > automatically grant access to the App Engine default service account which > is the account that the App Identity credentials are held by. The service > account's ID is something like <app-id>@appspot.gserviceaccount.com. If > you can add that account with appropriate permissions to the bucket you > created, the 403 should go away. > > Cheers, > > Nick > Cloud Platform Community Support > > On Tuesday, May 17, 2016 at 7:58:35 PM UTC-4, Alexey wrote: >> >> It's been a few days and I was wondering if any support folks are looking >> at this topic. I know you guys work super hard but want to make sure this >> question gets to somebody. > > -- You received this message because you are subscribed to the Google Groups "Google App Engine" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. Visit this group at https://groups.google.com/group/google-appengine. To view this discussion on the web visit https://groups.google.com/d/msgid/google-appengine/99727e66-95a8-4a86-883f-89092cbcd9cc%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
