Retention Policies and Cloud Storage
Use Case – Disallow deletion of bucket objects, regardless of IAM access Retention policy will lock the bucket (or object in a bucket) and not allow deletion, regardless…
Archive
Category: GCP Cloud Storage
Public Access Prevention Org Policy GCP
Org Policy – Public Access Prevention It is a best practice to enable this constraint at the top Organization Level. If projects need to override it, they can.…
Cloud Logging Buckets as Sink Logs in GCP
Often , corporate compliance requirements require that logs be stored for a certain number of years. This is easily accomplished in GCP – by setting up a sink…
Cloud Storage – Retention Policies and Object Lifecycles
Retention Policies and Object Lifecycles Object lifecycles are well understood in terms of storage classes – standard, nearline, coldline, archive. You can change the storage class of an…
Cloud Storage – Granting access to external users – e.g. Auditors
The simplest thing to do is to create signed URLs (same as what you would do on AWS S3 buckets). The URL can be for the entire bucket…
Object level permissions in GCP Storage
How do you ensure that individual Object level permissions can be set in GCP Storage? Disable Uniform Access (set Fine Grained Access to true). This will allow you…
How do you make a GCP bucket public?
Make a Storage Bucket Public The simplest way is to assign the AllUsers IAM role to the bucket. This makes it accessible for All users, regardless of their…
GCS Lifecycle Rules – Lifecycle Conditions
E.g. All versions that are not LIVE (and 30 days old) to be deleted. All other versions to be moved to COLDLINE (after 365 day) {“lifecycle”: { “rule”:…
External backends for Cloud CDN
Cloud CDN can work with both cloud storage and optionally external storage services (e.g. on premises, or other public clouds). External Backends are called custom origins. The endpoints…
Block Public Access to Cloud Storage Buckets
There is no excerpt because this is a protected post.