IssueTracker

Please describe your requested enhancement. Good feature requests will solve common problems or enable new use cases.

What you would like to accomplish:
We want to disable signed urls in Google Cloud Storage buckets for certain users.

How this might work:
Implement more granular IAM permissions such as storage.objects.signedurl.get and storage.objects.signedurl.create to limit who is allowed to create, get, and put signed urls.

If applicable, reasons why alternative solutions are not sufficient:
This will be add an extra security step to handle GCS busckets.

Other information (workarounds you have tried, documentation consulted, etc):
There is no current workaround.