iam
iam copied to clipboard
Internal server error due to incorrectly written scopes in the IAM scope policies
When you request an access token and a parametric scope, e.g. storage.read:/, is written without ':' in the IAM scope policies, you get an internal server error.
Example of incorrectly written scope policy:
{
"description": "Deny access to storage.read scope to everyone",
"rule": "DENY",
"scopes": ["storage.read/"],
"matchingPolicy": "PATH"
}