Skip to main content

GCP Storage Bucket

Google Cloud Storage buckets are globally-unique containers used to hold objects (files and their metadata) in Google Cloud. They provide highly durable, scalable and secure object storage for backups, static websites, data lakes, logs and more. Detailed information can be found in the official documentation: https://cloud.google.com/storage/docs/buckets

Terrafrom Mappings:

  • google_storage_bucket.name

Supported Methods​

  • GET: Get a gcp-storage-bucket by its "name"
  • LIST: List all gcp-storage-bucket
  • SEARCH

Possible Links​

gcp-compute-network​

A Storage bucket that is placed inside a VPC Service Controls service perimeter is implicitly tied to one or more VPC networks: only resources running in those networks can reach it without crossing the perimeter. Overmind therefore links the bucket to the relevant gcp-compute-network so you can see which networks have direct, perimeter-internal access to the data.

gcp-logging-bucket​

A Cloud Storage bucket can be configured to write access or storage logs to a separate logging bucket. When such logging is enabled, Overmind links the source bucket to the destination gcp-logging-bucket, allowing you to trace where request and object-change logs are being delivered.

gcp-cloud-kms-crypto-key​

If Customer-Managed Encryption Keys (CMEK) are used, the bucket is encrypted with a specific Cloud KMS crypto-key. Overmind surfaces this dependency by linking the bucket to the corresponding gcp-cloud-kms-crypto-key, making it easy to assess key rotation policies and access controls that protect the stored data.