Configure a Cloud Storage bucket

In App Design Center, you can configure a Cloud Storage bucket to store and retrieve unstructured object data for workloads such as serving website content, archival and disaster recovery, or distributing large objects. You can customize the bucket's component connections and configuration parameters based on the terraform-google-cloud-storage Terraform module.

Component connections

The following table includes the components that you can connect to a Cloud Storage bucket, and the resulting updates to your application and its generated Terraform code.

Connected component

Application updates

Background information

Compute Engine instance template
  • The Compute Engine instances can control bucket objects, including listing, creating, viewing, and deleting objects.
  • The roles/storage.objectAdmin role is assigned to the Compute Engine instance template service account.
 Set and manage IAM policies on buckets

service account
  • The service account can manage objects in the Cloud Storage bucket.
  • The service account IAM information is added to the Cloud Storage bucket.
  • The roles/storage.objectAdmin role is assigned to the service account.
 Set and manage IAM policies on buckets

Cloud Run
  • The Cloud Run service can manage objects in the Cloud Storage bucket.
  • The Cloud Run service account IAM information is added to the Cloud Storage bucket.
  • The roles/storage.objectAdmin role is assigned to the Cloud Run service account.
 Connect to Google Cloud services

Pub/Sub
  • The Pub/Sub subscription can write messages to the Cloud Storage bucket.
  • The Cloud Storage bucket information is added to the Pub/Sub subscription fields.
 Cloud Storage subscriptions

Required configuration parameters

If your template includes a Cloud Storage component, you must configure the following parameters before you deploy.

Parameter name

Description and constraints

Background information

Project ID

The project where you want to deploy the Cloud Storage resource.

 Configure components

Region

 location Bucket locations

Name

 name Bucket Names

Optional configuration parameters

The following parameters are optional. To display advanced parameters, in the Configuration area, select Show advanced fields.

Feature

Parameter name

Description and constraint information

Background information

Storage Class

 storageClass Storage Classes

Bucket Policy Only

 iamConfiguration.uniformBucketLevelAccess Uniform bucket-level access

Versioning

 versioning.enabled Object versioning

Autoclass

 autoclass.enabled Autoclass
Retention Policy

Is Locked

 retentionPolicy.isLocked Bucket Lock

Retention period

 retentionPolicy.retentionPeriod Retention policy

Encryption

Default KMS Key Name

 encryption.defaultKmsKeyName Use customer-managed encryption keys

Lifecycle Rules

Type

 lifecycle.rule[].action.type Object Lifecycle Management

Storage Class

 lifecycle.rule[].action.storageClass setStorageClass

Age

 lifecycle.rule[].condition.age age

Send Age If Zero

 send_age_if_zero lifecycle_rules

Created Before

 lifecycle.rule[].condition.createdBefore createdBefore

With State

 with_state lifecycle_rules

Matches Storage Class

 lifecycle.rule[].condition.matchesStorageClass[] matchesStorageClass

Matches Prefix

 lifecycle.rule[].condition.matchesPrefix[] matchesPrefix and matchesSuffix

Matches Suffix

 lifecycle.rule[].condition.matchesSuffix[] matchesPrefix and matchesSuffix

Num Newer Versions

 lifecycle.rule[].condition.numNewerVersions numNewerVersions

Custom Time Before

 lifecycle.rule[].condition.customTimeBefore customTimeBefore

Days Since Custom Time

 lifecycle.rule[].condition.daysSinceCustomTime daysSinceCustomTime

Days Since Noncurrent Time

 lifecycle.rule[].condition.daysSinceNoncurrentTime daysSinceNoncurrentTime

Noncurrent Time Before

 lifecycle.rule[].condition.noncurrentTimeBefore noncurrentTimeBefore

Internal Encryption Config

Create Encryption Key

 To create a Cloud Key Management Service key ring and key, select the checkbox. Customer-managed encryption keys

Prevent Destroy

 To prevent the destruction of the Cloud KMS key, select the checkbox. Key versions and locked objects

Key Destroy Scheduled Duration

 destroyScheduledDuration Key versions and locked objects

Key Rotation Period

 rotationPeriod Key rotation

Force Destroy

To delete all contained objects when you delete a bucket, select the checkbox.

 force_destroy

IAM Members

Role

The collection of permissions that you want to grant.

 Set and manage IAM policies on buckets

Member

The principals that are granted the role.

 Set and manage IAM policies on buckets

Labels

Key

 labels Tags and labels

Value

 labels Tags and labels

Custom Placement Config

Data Locations

 customPlacementConfig.dataLocations[] Dual-regions

CORS

Origin

 cors[].origin[] Cross-origin resource sharing (CORS)

Method

 cors[].method[] How CORS works

Response Header

 cors[].responseHeader[] Components of a CORS configuration

Max Age Seconds

 cors[].maxAgeSeconds[] Components of a CORS configuration

Log Bucket

 logging.logBucket Usage logs & storage logs

Log Object Prefix

 logging.logObjectPrefix Usage logs & storage logs

Website

Main Page Suffix

 website.mainPageSuffix Recommended: assign specialty pages

Not Found Page

 website.notFoundPage Recommended: assign specialty pages

Public Access Prevention

 iamConfiguration.publicAccessPrevention Public access prevention

Soft Delete Policy

Retention Duration Seconds

 softDeletePolicy.retentionDurationSeconds Soft delete