Skip to content

Commit

Permalink
Fix
Browse files Browse the repository at this point in the history
  • Loading branch information
makseq committed Nov 30, 2024
1 parent 20abd43 commit f56278b
Showing 1 changed file with 4 additions and 3 deletions.
7 changes: 4 additions & 3 deletions docs/source/guide/security.md
Original file line number Diff line number Diff line change
Expand Up @@ -86,16 +86,16 @@ All specific object properties that are exposed with a REST API are added to an

The PostgreSQL database has SSL mode enabled and requires valid certificates.

### Secure access to cloud storage
### Secure access to cloud storages

Each project in Label Studio can be linked to various cloud storage options such as AWS S3, Google Cloud Storage, and others. Users primarily access files from cloud storage through pre-signed URLs generated by Label Studio. You can configure multiple cloud storage connections per project with different credentials to manage data access. Learn how to set up [cloud storage settings](/guide/storage.html).

Combine workspaces, projects, users, and roles. This approach helps configure and secure cloud storage access effectively.

#### How Label Studio Handles Source Storage Security
#### Source storages security

Label Studio cloud storage integration performs two key operations:
* **task sync and import** and
* **task sync and import**,
* **media file serving**.

Below, both are explained from a security perspective.
Expand Down Expand Up @@ -184,6 +184,7 @@ To ensure maximum security and isolation of your data behind a VPC, allowing acc

<img width="49%" style="float: right;" src="/images/storages/cloud-storage-vpn.jpg" alt="Label Studio + Cloud Storage VPC" class="make-intense-zoom" />


#### Additional Notes

**Google ADC**: If you use Label Studio on-premises with Google Cloud Storage, you can set up [Application Default Credentials](https://cloud.google.com/docs/authentication/provide-credentials-adc) to provide cloud storage authentication globally for all projects, so users do not need to configure credentials manually.
Expand Down

0 comments on commit f56278b

Please sign in to comment.