/

Console

• English
• Deutsch
• Español – América Latina
• Français
• Português – Brasil
• 中文 – 简体
• 日本語
• 한국어

Sign in

• Google Cloud SDK

Start free

gcloud alpha storage buckets update

gcloud alpha storage buckets update gs://my-bucket --retention-period=1y36m

gcloud alpha storage buckets update gs://my-bucket --clear-retention-period

The JSON file should contain an object with keys among "gmekEnforcement", "cmekEnforcement", and "csekEnforcement". Each of these keys, if present, should have a "restrictionMode" key, determining whether the corresponding encryption type should be allowed or restricted for new objects.

Valid values for "restrictionMode" are:

• "NotRestricted": The encryption type is allowed for new objects.
• "FullyRestricted": The encryption type is not allowed for new objects.

Example JSON file content, to enforce only CMEK for new objects:

{
  "gmekEnforcement": {
    "restrictionMode": "FullyRestricted"
  },
  "cmekEnforcement": {
    "restrictionMode": "NotRestricted"
  },
  "csekEnforcement": {
    "restrictionMode": "FullyRestricted"
  }
}

[
  {
    "origin": ["http://origin1.example.com"],
    "responseHeader": ["Content-Type"],
    "method": ["GET"],
    "maxAgeSeconds": 3600
  }
]

--clear-default-encryption-key

Clears the bucket's default encryption key.

--default-encryption-key=DEFAULT_ENCRYPTION_KEY

Set the default KMS key for the bucket.

{
  "mode": "Enabled",
  "publicNetworkSource": { "allowedIpCidrRanges": ["0.0.0.0/0"] },
  "vpcNetworkSources": [
      {
          "network": "projects/PROJECT_NAME/global/networks/NETWORK_NAME",
          "allowedIpCidrRanges": ["0.0.0.0/0"]
      },
  ]
}

--clear-labels

Clear all labels associated with a bucket.

--labels-file=LABELS_FILE

Sets the label configuration for the bucket. An example label JSON document looks like the following:

{
  "your_label_key": "your_label_value",
  "your_other_label_key": "your_other_label_value"
}

Or at least one of these can be specified:

--remove-labels=[LABEL_KEYS,…]

Remove labels by their key names.

--update-labels=[LABEL_KEYS_AND_VALUES,…]

Add or update labels. Example: --update-labels=key1=value1,key2=value2

--clear-lifecycle

Removes all lifecycle configuration for the bucket.

--lifecycle-file=LIFECYCLE_FILE

Sets the lifecycle management configuration on a bucket. For example, The following lifecycle management configuration JSON document specifies that all objects in this bucket that are more than 365 days old are deleted automatically:

{
  "rule":
  [
    {
      "action": {"type": "Delete"},
      "condition": {"age": 365}
    }
  ]
}

--clear-log-bucket

Disables usage and storage logging for the bucket specified in the overall update command.

--log-bucket=LOG_BUCKET

Enables usage and storage logging for the bucket specified in the overall update command, outputting log files to the bucket specified in this flag. Cloud Storage does not validate the existence of the bucket receiving logs. In addition to enabling logging on your bucket, you also need to grant cloud-storage-analytics@google.com write access to the log bucket.

--clear-log-object-prefix

Clears the prefix used to determine the naming of log objects in the logging bucket.

--log-object-prefix=LOG_OBJECT_PREFIX

Specifies a prefix for the names of logs generated in the log bucket. The default prefix is the bucket name. If logging is not enabled, this flag has no effect.

--clear-pap, --clear-public-access-prevention

Unsets the public access prevention setting on a bucket.

--[no-]pap, --[no-]public-access-prevention

If True, sets public access prevention to "enforced". If False, sets public access prevention to "inherited". Use --public-access-prevention to enable and --no-public-access-prevention to disable.

--clear-retention-period

Clears the object retention period for a bucket.

--retention-period=RETENTION_PERIOD

Minimum retention period for objects stored in the bucket, for example --retention-period=P1Y1M1DT5S. Objects added to the bucket cannot be deleted until they've been stored for the specified length of time. Default is no retention period. Only available for Cloud Storage using the JSON API.

--clear-web-error-page

Clear website error page if bucket is hosting website.

--web-error-page=WEB_ERROR_PAGE

Cloud Storage allows you to configure a bucket to behave like a static website. A subsequent GET bucket request through a custom domain for a non-existent object serves the specified error page instead of the standard Cloud Storage error.

Run $ gcloud help for details.

gcloud storage buckets update