Google Cloud Compliance ControlsGoogle Cloud Storage
GCP projects should have Data Access audit logs enabled for Cloud Storage
Data Access audit logs (DATA_READ and DATA_WRITE) are enabled for Cloud Storage at the project level. Unlike Admin Activity logs (enabled by default), Data Access logs must be explicitly configured to track read and write operations on Cloud Storage objects.
What this control checks
The Prowler check cloudstorage_audit_logs_enabled looks at the resource type cloudresourcemanager.googleapis.com/Project.
Related controls
Tool mappings
Use these identifiers to cross-reference this control across tools, reports, and evidence.
- Compliance.tf Control:
gcp_cloudstorage_audit_logs_enabled - Prowler Check:
cloudstorage_audit_logs_enabled
Last reviewed: 2026-10-09