Home - News ( United States | United Kingdom | Italy | Germany ) - Football scores

Showing content from https://cloud.google.com/storage/docs/using-bucket-lock below:

Use and lock retention policies | Cloud Storage

• Discover

• Product overview
• Storage Intelligence overview

• Get started

• Terraform support for Cloud Storage
• Configure and manage Storage Intelligence

• Create buckets

• Create a bucket
• Domain-named bucket verification

• Access and manage buckets

• List buckets
• Change the default storage class of a bucket
• Move and rename buckets
• Delete buckets

• Upload and download objects

• About objects
• Overview of uploads and downloads

• Access and manage objects

• List objects
• Copy, rename, and move objects
• Change an object's storage class
• Tools to access and manage objects using a directory structure
• Object transcoding
• Delete objects

• Get insights on your stored data

• Analyze stored data with Gemini Cloud Assist

• Cache objects

• About caching

• Control data lifecycles

• Options for controlling data lifecycles

• Make requests

• Consistency in Cloud Storage operations
• Batched requests
• Use long-running operations
• Paginate results
• URI wildcards

• Secure data

• Monitor data and usage

• Use Cloud Audit Logs with Cloud Storage
• Usage logs and storage logs
• Use Cloud Audit Logs with storage batch operations
• Use Cloud Logs with storage batch operations
• Use Cloud Audit Logs with Storage Insights
• Use gRPC client-side metrics
• Use client-side traces

• Protection, backup, and recovery

• Overview

• Mount buckets with Cloud Storage FUSE

• Overview
• Quickstart
• Install Cloud Storage FUSE
• Mount buckets

• Work across products, Clouds, and platforms

• Best practices for media workloads
• Interoperability
• Use Cloud Storage with Big Data
• Integration with Google Cloud Platform services and tools

• Troubleshoot

• Troubleshooting

• AI and ML
• Application development
• Application hosting
• Compute
• Data analytics and pipelines
• Databases
• Distributed, hybrid, and multicloud
• Generative AI
• Industry solutions
• Networking
• Observability and monitoring
• Security
• Storage

• Access and resources management
• Costs and usage management
• Google Cloud SDK, languages, frameworks, and tools
• Infrastructure as code
• Migration

• Google Cloud Home
• Free Trial and Free Tier
• Architecture Center
• Blog
• Contact Sales
• Google Cloud Developer Center
• Google Developer Center
• Google Cloud Marketplace
• Google Cloud Marketplace Documentation
• Google Cloud Skills Boost
• Google Cloud Solution Center
• Google Cloud Support
• Google Cloud Tech Youtube Channel

Stay organized with collections Save and categorize content based on your preferences.

Overview

This page describes how to use the Bucket Lock feature, including working with retention policies and permanently locking them on buckets.

Before you can use the Bucket Lock feature, make sure the steps in the following sections have been completed.

To get the permissions that you need to use Bucket Lock, ask your administrator to grant you the Storage Admin (roles/storage.admin) role on the bucket. This predefined role contains the permissions required to use Bucket Lock. To see the exact permissions required, expand the Required permissions section:

• storage.buckets.get
• storage.buckets.list
  • This permission is only required if you plan on using the Google Cloud console to perform the instructions on this page.
• storage.buckets.update

You might also be able to get these permissions with custom roles.

For information about granting roles on buckets, see Set and manage IAM policies on buckets.

To add, modify, or remove a retention policy on a bucket:

1. In the Google Cloud console, go to the Cloud Storage Buckets page.

   Go to Buckets

2. In the list of buckets, click the name of the bucket whose retention policy you want to change.

3. Select the Protection tab near the top of the page.

4. In the Retention policy section, set your retention policy:

   1. If no retention policy currently applies to the bucket, click the add_box Set Retention Policy link. Choose a unit of time and a length of time for your retention period.

   2. If a retention policy currently applies to a bucket, it appears in the section. Click Edit to modify the retention time or Delete to remove the retention policy entirely.

   See Retention periods for information about how the Google Cloud console converts between different units of time.

To learn how to get detailed error information about failed Cloud Storage operations in the Google Cloud console, see Troubleshooting.

Use the gcloud storage buckets update command with the appropriate flag:

gcloud storage buckets update gs://BUCKET_NAME FLAG

Where:

• BUCKET_NAME is the name of the relevant bucket. For example, my-bucket.

• FLAG is the desired setting for the bucket's retention period. Use one of the following formats:

  • --retention-period and a retention period, if you want to add or change a retention policy. For example, --retention-period=1d43200s.
  • --clear-retention-period, if you want to remove the retention policy on the bucket.

If successful, the response looks like:

Updating gs://my-bucket/...
  Completed 1  

For more information, see the Cloud Storage C++ API reference documentation.

To authenticate to Cloud Storage, set up Application Default Credentials. For more information, see Set up authentication for client libraries.

The following sample sets a retention policy on a bucket:

The following sample removes the retention policy from a bucket:

For more information, see the Cloud Storage C# API reference documentation.

To authenticate to Cloud Storage, set up Application Default Credentials. For more information, see Set up authentication for client libraries.

The following sample sets a retention policy on a bucket:

The following sample removes the retention policy from a bucket:

For more information, see the Cloud Storage Go API reference documentation.

To authenticate to Cloud Storage, set up Application Default Credentials. For more information, see Set up authentication for client libraries.

The following sample sets a retention policy on a bucket:

The following sample removes the retention policy from a bucket:

For more information, see the Cloud Storage Java API reference documentation.

To authenticate to Cloud Storage, set up Application Default Credentials. For more information, see Set up authentication for client libraries.

The following sample sets a retention policy on a bucket:

The following sample removes the retention policy from a bucket:

For more information, see the Cloud Storage Node.js API reference documentation.

To authenticate to Cloud Storage, set up Application Default Credentials. For more information, see Set up authentication for client libraries.

The following sample sets a retention policy on a bucket:

The following sample removes the retention policy from a bucket:

For more information, see the Cloud Storage PHP API reference documentation.

To authenticate to Cloud Storage, set up Application Default Credentials. For more information, see Set up authentication for client libraries.

The following sample sets a retention policy on a bucket:

The following sample removes the retention policy from a bucket:

For more information, see the Cloud Storage Python API reference documentation.

To authenticate to Cloud Storage, set up Application Default Credentials. For more information, see Set up authentication for client libraries.

The following sample sets a retention policy on a bucket:

The following sample removes the retention policy from a bucket:

For more information, see the Cloud Storage Ruby API reference documentation.

To authenticate to Cloud Storage, set up Application Default Credentials. For more information, see Set up authentication for client libraries.

The following sample sets a retention policy on a bucket:

The following sample removes the retention policy from a bucket:

To lock a bucket and permanently restrict edits to the bucket's retention policy:

1. In the Google Cloud console, go to the Cloud Storage Buckets page.

   Go to Buckets

2. In the list of buckets, click the name of the bucket that you want to lock the retention policy for.

3. Select the Protection tab near the top of the page.

4. In the Retention policy section, click the Lock button.

   The Lock retention policy? dialog box appears.

5. Read the Permanent notice.

6. In the Bucket name text box, type in the name of your bucket.

7. Click Lock policy.

To learn how to get detailed error information about failed Cloud Storage operations in the Google Cloud console, see Troubleshooting.

Use the gcloud storage buckets update command with the --lock-retention-period flag:

gcloud storage buckets update gs://BUCKET_NAME --lock-retention-period

Where BUCKET_NAME is the name of the relevant bucket. For example, my-bucket.

If successful, the response looks similar to the following example:

Updating gs://my-bucket/...
  Completed 1  

For more information, see the Cloud Storage C++ API reference documentation.

To authenticate to Cloud Storage, set up Application Default Credentials. For more information, see Set up authentication for client libraries.

For more information, see the Cloud Storage C# API reference documentation.

To authenticate to Cloud Storage, set up Application Default Credentials. For more information, see Set up authentication for client libraries.

For more information, see the Cloud Storage Go API reference documentation.

To authenticate to Cloud Storage, set up Application Default Credentials. For more information, see Set up authentication for client libraries.

For more information, see the Cloud Storage Java API reference documentation.

To authenticate to Cloud Storage, set up Application Default Credentials. For more information, see Set up authentication for client libraries.

For more information, see the Cloud Storage Node.js API reference documentation.

To authenticate to Cloud Storage, set up Application Default Credentials. For more information, see Set up authentication for client libraries.

For more information, see the Cloud Storage PHP API reference documentation.

To authenticate to Cloud Storage, set up Application Default Credentials. For more information, see Set up authentication for client libraries.

For more information, see the Cloud Storage Python API reference documentation.

To authenticate to Cloud Storage, set up Application Default Credentials. For more information, see Set up authentication for client libraries.

For more information, see the Cloud Storage Ruby API reference documentation.

To authenticate to Cloud Storage, set up Application Default Credentials. For more information, see Set up authentication for client libraries.

1. Have gcloud CLI installed and initialized, which lets you generate an access token for the Authorization header.

2. Use cURL to call the JSON API with a POST Bucket request:

   curl -X POST \
   -H "Authorization: Bearer $(gcloud auth print-access-token)" \
   "https://storage.googleapis.com/storage/v1/b/BUCKET_NAME/lockRetentionPolicy?ifMetagenerationMatch=BUCKET_METAGENERATION_NUMBER"

   Where:

   • BUCKET_NAME is the name of the relevant bucket. For example, my-bucket.
   • BUCKET_METAGENERATION_NUMBER is the metageneration value for the bucket. For example, 8. You can find the metageneration value for your bucket by calling the JSON API with a GET Bucket request.

The XML API cannot be used to lock a bucket. Use one of the other Cloud Storage tools, such as the Google Cloud console, instead.

To view what, if any, retention policy is set on a bucket and whether that retention policy is locked:

1. In the Google Cloud console, go to the Cloud Storage Buckets page.

   Go to Buckets

2. Click the name of the bucket whose status you want to view.

   If a bucket has a retention policy, the retention period is displayed in the Protection field for the bucket. If the retention policy is not locked, a lock icon appears next to the retention period in an unlocked state. If the retention policy is locked, a lock icon appears next to the retention period in a locked state.

Use the gcloud storage buckets describe command with the --format flag:

gcloud storage buckets describe gs://BUCKET_NAME --format="default(retention_policy)"

Where BUCKET_NAME is the name of the bucket whose retention policy you want to view. For example, my-bucket.

If successful and a retention policy exists for the bucket, the response is similar to the following:

retention_policy:
  effectiveTime: '2022-10-04T18:51:22.161000+00:00'
  retentionPeriod: '129600'

If successful and a retention policy does not exist for the bucket, the response is similar to the following:

null

For more information, see the Cloud Storage C++ API reference documentation.

To authenticate to Cloud Storage, set up Application Default Credentials. For more information, see Set up authentication for client libraries.

For more information, see the Cloud Storage C# API reference documentation.

To authenticate to Cloud Storage, set up Application Default Credentials. For more information, see Set up authentication for client libraries.

For more information, see the Cloud Storage Go API reference documentation.

To authenticate to Cloud Storage, set up Application Default Credentials. For more information, see Set up authentication for client libraries.

For more information, see the Cloud Storage Java API reference documentation.

To authenticate to Cloud Storage, set up Application Default Credentials. For more information, see Set up authentication for client libraries.

For more information, see the Cloud Storage Node.js API reference documentation.

To authenticate to Cloud Storage, set up Application Default Credentials. For more information, see Set up authentication for client libraries.

For more information, see the Cloud Storage PHP API reference documentation.

To authenticate to Cloud Storage, set up Application Default Credentials. For more information, see Set up authentication for client libraries.

For more information, see the Cloud Storage Python API reference documentation.

To authenticate to Cloud Storage, set up Application Default Credentials. For more information, see Set up authentication for client libraries.

For more information, see the Cloud Storage Ruby API reference documentation.

To authenticate to Cloud Storage, set up Application Default Credentials. For more information, see Set up authentication for client libraries.

1. Have gcloud CLI installed and initialized, which lets you generate an access token for the Authorization header.

2. Use cURL to call the JSON API with a GET Bucket request that includes the desired fields:

   curl -X GET -H "Authorization: Bearer $(gcloud auth print-access-token)" \
   "https://storage.googleapis.com/storage/v1/b/BUCKET_NAME?fields=retentionPolicy"

   Where BUCKET_NAME is the name of the relevant bucket. For example, my-bucket.

   If the bucket has a retention policy set on it, the response looks like the following example:

   {
     "retentionPolicy": {
         "retentionPeriod": "TIME_IN_SECONDS",
         "effectiveTime": "DATETIME",
         "isLocked": "BOOLEAN"
      },
   }

The XML API cannot be used to view the retention policy on a bucket. Use one of the other Cloud Storage tools, such as the Google Cloud console, instead.

• Learn more about retention policies.
• Learn how to use object holds.
• Learn about Object Lifecycle Management, which can automatically delete files once they reach their retention period.

Except as otherwise noted, the content of this page is licensed under the Creative Commons Attribution 4.0 License, and code samples are licensed under the Apache 2.0 License. For details, see the Google Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.

Last updated 2025-10-02 UTC.

[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-10-02 UTC."],[],[]]

RetroSearch is an open source project built by @garambo | Open a GitHub Issue

Search and Browse the WWW like it's 1997 | Search results from DuckDuckGo

HTML: 3.2 | Encoding: UTF-8 | Version: 0.7.5