Cloud Storage

Cloud Storage is a service for storing your

objects⁠

in Google Cloud. An object is an immutable piece of data consisting of a file of any format. You store objects in containers called

buckets⁠

. Buckets can also contain

managed folders⁠

, which you use to provide expanded access to groups of objects with a shared name prefix.

All buckets are associated with a

project⁠

, and you can group your projects under an

organization⁠

. Each project, bucket, managed folder, and object in Google Cloud is a resource in Google Cloud, as are things such as

Compute Engine instances⁠

After you create a project, you can

create Cloud Storage buckets⁠

upload objects⁠

to your buckets, and

download objects⁠

from your buckets. You can also grant permissions to make your data accessible to principals you specify or

accessible to everyone on the public internet⁠

⁠

Resource names

Note: The use of resource names within Cloud Storage is limited to

Pub/Sub Notifications for Cloud Storage⁠

and

Identity and Access Management⁠

Each resource has a unique name that identifies it, much like a filename. Buckets have a resource name in the form of projects/_/buckets/BUCKET_NAME, where BUCKET_NAME is the ID of the bucket. Objects have a resource name in the form of projects/_/buckets/BUCKET_NAME/objects/OBJECT_NAME, where OBJECT_NAME is the ID of the object.

A #NUMBER appended to the end of the resource name indicates a specific generation of the object. #0 is a special identifier for the most recent version of an object. #0 is useful to add when the name of the object ends in a string that would otherwise be interpreted as a generation number.

⁠

We can use IAM for the project to control which individual user or service account can see the bucket, list the objects in the bucket, view the names of the objects in the bucket, or create new buckets. For most purposes, IAM is sufficient, and roles are inherited from project to bucket to object.

Access control lists or ACLs offer finer control.

For even more detailed control, signed URLs provide a cryptographic key that gives time-limited access to a bucket or object.

Finally, a signed policy document further refines the control by determining what kind of file can be uploaded by someone with a signed URL.

⁠

Ref:

Product overview of Cloud Storage | Google Cloud⁠

⁠

Resource names

Want to print your doc?
This is not the way.

Try clicking the ⋯ next to your doc name or using a keyboard shortcut (

CtrlP

) instead.