Skip to content

Commit

Permalink
Fix
Browse files Browse the repository at this point in the history
  • Loading branch information
makseq committed Nov 30, 2024
1 parent 9cab170 commit c8b8edd
Showing 1 changed file with 1 addition and 4 deletions.
5 changes: 1 addition & 4 deletions docs/source/guide/security.md
Original file line number Diff line number Diff line change
Expand Up @@ -121,10 +121,7 @@ Once Label Studio tasks are created, users can view and edit tasks in their brow
#### Cloud Storage Behind Your VPC

!!! warning Google Cloud Storage
Google Cloud Storage does **not** support IP or VPN restrictions for pre-signed URLs, making this approach infeasible for GCS. Alternative Security Measures for GCS:
- **Signed URLs with Limited Lifetimes**: Use signed URLs that expire after a short period to limit the window of access. This reduces the risk of unauthorized access if the URL is exposed.
- **Additional Authentication Mechanisms**: Implement additional layers of authentication, such as OAuth 2.0, to ensure that only authorized users can generate or access signed URLs.
- **Service Accounts and IAM Policies**: Use service accounts with specific IAM roles to control access to your GCS buckets. Ensure that only necessary permissions are granted to minimize potential security risks.
Google Cloud Storage does **not** support IP or VPN restrictions for pre-signed URLs, making this approach infeasible for GCS. As an alternative security measure for GCS, you can use **signed URLs with short lifetimes**.

To ensure maximum security and isolation of your data behind a VPC, allowing access only to users within your VPC, you can use the following technique — especially effective with Label Studio SaaS (Cloud, app.humansignal.com) and AWS S3:

Expand Down

0 comments on commit c8b8edd

Please sign in to comment.