Archives for GCP Cloud Storage
Retention Policies and Cloud Storage
Use Case - Disallow deletion of bucket objects, regardless of IAM access Retention policy will lock the bucket (or object in a bucket) and not allow deletion, regardless of access…
Public Access Prevention Org Policy GCP
Org Policy - Public Access Prevention It is a best practice to enable this constraint at the top Organization Level. If projects need to override it, they can. But by…
Cloud Logging Buckets as Sink Logs in GCP
Often , corporate compliance requirements require that logs be stored for a certain number of years. This is easily accomplished in GCP - by setting up a sink log for…
Cloud Storage – Retention Policies and Object Lifecycles
Retention Policies and Object Lifecycles Object lifecycles are well understood in terms of storage classes - standard, nearline, coldline, archive. You can change the storage class of an existing object…
Cloud Storage – Granting access to external users – e.g. Auditors
The simplest thing to do is to create signed URLs (same as what you would do on AWS S3 buckets). The URL can be for the entire bucket or for…
Object level permissions in GCP Storage
How do you ensure that individual Object level permissions can be set in GCP Storage? Disable Uniform Access (set Fine Grained Access to true). This will allow you to use…
How do you make a GCP bucket public?
Make a Storage Bucket Public The simplest way is to assign the AllUsers IAM role to the bucket. This makes it accessible for All users, regardless of their source. What…
GCS Lifecycle Rules – Lifecycle Conditions
All versions that are not LIVE (and 30 days old) to be deleted. All other versions to be moved to COLDLINE (after 365 day) {"lifecycle": { "rule": } }]}} Run…
External backends for Cloud CDN
Cloud CDN can work with both cloud storage and optionally external storage services ( on premises, or other public clouds). External Backends are called custom origins. The endpoints are called…
Block Public Access to Cloud Storage Buckets
This content is password protected. To view it please enter your password below: Password: