Configure Cloud Storage in Application Design Center

Cloud Storage allows world-wide storage and retrieval of any amount of data at any time. You can use Cloud Storage for a range of scenarios including serving website content, storing data for archival and disaster recovery, or distributing large data objects to users via direct download. For more information, see Product overview of Cloud Storage .

This document describes the connections and parameters you can configure when using App Design Center to create a Cloud Storage bucket. The configuration parameters are based on the terraform-google-cloud-storage Terraform module.

Component connections

The following table includes the components that you can connect to a Cloud Storage bucket, and the resulting updates to your application and its generated Terraform code.

Connected component

Application updates

Background information

  • The Compute Engine instances can control bucket objects, including listing, creating, viewing, and deleting objects.
  • The roles/storage.objectAdmin role is assigned to the Compute Engine instance template service account.
  • The service account can manage objects in the Cloud Storage bucket.
  • The service account IAM information is added to the Cloud Storage bucket.
  • The roles/storage.objectAdmin role is assigned to the service account.
  • The Cloud Run service can manage objects in the Cloud Storage bucket.
  • The Cloud Run service account IAM information is added to the Cloud Storage bucket.
  • The roles/storage.objectAdmin role is assigned to the Cloud Run service account.
  • The Pub/Sub subscription can write messages to the Cloud Storage bucket.
  • The Cloud Storage bucket information is added to the Pub/Sub subscription fields.

Required configuration parameters

If your template includes a Cloud Storage component, you must configure the following parameters before you deploy.

Parameter name

Description and constraints

Background information

Project ID

The project where you want to deploy the Cloud Storage resource.

Configure components

Region

location Bucket locations

Name

name Bucket Names

Optional configuration parameters

The following parameters are optional. To display advanced parameters, in the Configurationarea, select Show advanced fields.

Feature

Parameter name

Description and constraint information

Background information

Retention Policy

Is Locked

Internal Encryption Config

Create Encryption Key

To create a Cloud Key Management Service key ring and key, select the checkbox.

Prevent Destroy

To prevent the destruction of the Cloud KMS key, select the checkbox.

Key Rotation Period

Force Destroy

To delete all contained objects when you delete a bucket, select the checkbox.

IAM Members

Role

The collection of permissions that you want to grant.

Member

The principals that are granted the role.

Labels

Key

Custom Placement Config

Data Locations

Soft Delete Policy

Retention Duration Seconds

Create a Mobile Website
View Site in Mobile | Classic
Share by: