Google storage write only (no delete)

Question

I would like to use google storage for backing up my database. However, for security reason, i would like to use a "service account" with a write only role.

But it seems like this role can also delete objects! So my question here: can we make a bucket truly "write only, no deletion"? And of course how?

Answer 1

This is now possible with the Google Cloud Storage Object Creator role roles/storage.objectCreator.

https://cloud.google.com/iam/docs/understanding-roles#storage.objectCreator