Delete IP filtering rules on a bucket

This page describes how to delete individual or multiple bucket IP filtering rules while keeping IP filtering enabled on a bucket. Deleting rules removes the network access granted by the rules being removed.

Required roles

To get the required permissions for deleting the IP filtering rules on a bucket, ask your administrator to grant you the Storage Admin (roles/storage.admin) role on the bucket. This role contains the permissions required to delete bucket IP filtering rules.

To see the exact permissions that are required, expand the Required permissions section:

Required permissions

storage.buckets.update
storage.buckets.setIpFilter

You can also get these permissions with custom roles. You might be able to get these permissions with other predefined roles as well. To see which roles are associated with which permissions, refer to IAM roles for Cloud Storage.

For instructions on granting roles for buckets, see Set and manage IAM policies on buckets.

gcloud

To view the bucket's IP filtering configuration and save it to a JSON file, run the gcloud storage buckets describe command in your development environment:
```
gcloud storage buckets describe gs://BUCKET_NAME --format="json(ipFilter)" > JSON_FILE_NAME
```
Where:
- BUCKET_NAME is the name of your bucket.
- JSON_FILE_NAME is the name of the JSON file that contains the settings for the bucket.

Edit the JSON file to remove the specific IP ranges or VPC network sources you want to delete from the publicNetworkSource.allowedIpCidrRanges list or the vpcNetworkSources list.

The following example shows how to update the JSON file to delete the public IP range 192.0.2.0/24:

    // Original configuration (Before deletion)
    {
      "publicNetworkSource": {
        "allowedIpCidrRanges": ["192.0.2.0/24", "203.0.113.0/24"]
      },
      // ... other settings ...
    }

    // Updated configuration (After deletion - '192.0.2.0/24' is excluded)
    {
      "publicNetworkSource": {
        "allowedIpCidrRanges": ["203.0.113.0/24"]
      },
      // ... other settings ...
    }

To apply the updated configuration, run the gcloud storage buckets update command in your development environment:
```
gcloud storage buckets update gs://BUCKET_NAME --ip-filter-file=JSON_FILE_NAME
```
Where
- BUCKET_NAME is the name of your bucket.
- JSON_FILE_NAME is the name of the JSON file that contains the settings for the bucket.

Delete IP filtering rules on a bucket

Required roles

Required permissions