Skip to content

fix: Add bucket ownership verification to prevent bucket squatting in Model.upload() - #6574

Merged
copybara-service[bot] merged 1 commit into
mainfrom
copybara_897201695
Apr 14, 2026
Merged

fix: Add bucket ownership verification to prevent bucket squatting in Model.upload()#6574
copybara-service[bot] merged 1 commit into
mainfrom
copybara_897201695

Conversation

@copybara-service

Copy link
Copy Markdown
Contributor

fix: Add bucket ownership verification to prevent bucket squatting in Model.upload()

@copybara-service
copybara-serviceBot requested a review from a team as a code ownerApril 9, 2026 23:14
@product-auto-labelproduct-auto-labelBot added size: m Pull request size is medium. api: vertex-ai Issues related to the googleapis/python-aiplatform API. labels Apr 9, 2026
@copybara-service
copybara-serviceBotforce-pushed the copybara_897201695 branch 8 times, most recently from 8eb235e to 73a0528CompareApril 14, 2026 16:17
@copybara-service
copybara-serviceBot merged commit 9feda02 into mainApr 14, 2026
instantraaamen added a commit to instantraaamen/python-aiplatform that referenced this pull request Apr 19, 2026
The staging bucket fix (googleapis#6574) added `_verify_bucket_ownership()` to
prevent bucket squatting, but the pipeline artifacts bucket still uses a
predictable name (`{project}-vertex-pipelines-{location}`) and does not
verify ownership when the bucket already exists.
This adds the same ownership check to
`create_gcs_bucket_for_pipeline_artifacts_if_it_does_not_exist()`.
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

api: vertex-aiIssues related to the googleapis/python-aiplatform API.google-contributorsize: mPull request size is medium.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant

@vertex-sdk-bot