Can you write to GCP PubSub with write only permissions?

Question

I am creating a data pipeline in GCP. For some clients we want to have a publish only model (for security reasons). If read permissions is removed out of the default pubsub acl, will it impact writes in any way? What I am most worried about is that folks will be able to publish, but they may not be able to obtain any data that would tell them they should retry. Any help is much appreciated.

Answer 1

In the documentation, you have a role for publishing and a role for subscribing.. Simply grant the correct one to the service account used by the clients, and that's all!