Google Cloud Compliance ControlsGoogle Cloud Storage
Cloud Storage buckets should have usage and storage logs enabled
Google Cloud Storage buckets are evaluated to ensure that Usage and Storage Logs are enabled. Enabling these logs provides detailed visibility into access requests, usage patterns, and storage activity within each bucket.
What this control checks
Checks that each Cloud Storage bucket has a logging configuration
Related controls
- Cloud Storage buckets used for exporting logs should have object versioning enabled
- Cloud Storage buckets should have uniform bucket-level access enabled
- Cloud Storage buckets should have Bucket Only Policy enabled
- HTTP(S) load balancers should have logging enabled
- VPC subnets should all have VPC Flow Logs enabled
Tool mappings
Use these identifiers to cross-reference this control across tools, reports, and evidence.
- Compliance.tf Control:
gcp_cloudstorage_bucket_logging_enabled - Checkov Check:
CKV_GCP_62 - Prowler Check:
cloudstorage_bucket_logging_enabled - KICS Query:
d6cabc3a-d57e-48c2-b341-bf3dd4f4a120
Last reviewed: 2026-10-09