Google Cloud Compliance ControlsGoogle Cloud Storage
Cloud Storage buckets should have uniform bucket-level access enabled
Uniform bucket-level access should be enabled on Cloud Storage buckets. When enabled, Access Control Lists (ACLs) are disabled, and only bucket-level Identity and Access Management (IAM) permissions grant access to that bucket and the objects it contains.
What this control checks
Cloud Storage buckets should have uniform bucket-level access enabled
Framework mappings
The clauses this control is mapped to in each framework.
- 5.2 Ensure That Cloud Storage Buckets Have Uniform BucketLevel Access Enabled
- 5.2 Ensure That Cloud Storage Buckets Have Uniform Bucket-Level Access Enabled
- 5.2 Ensure that Cloud Storage buckets have uniform bucket-level access enabled
- 5.2 Ensure that Cloud Storage buckets have uniform bucket-level access enabled
- 5.2 Ensure that Cloud Storage buckets have uniform bucket-level access enabled
Tool mappings
Use these identifiers to cross-reference this control across tools, reports, and evidence.
- Compliance.tf Control:
storage_bucket_uniform_access_enabled - Checkov Check:
CKV_GCP_29 - Powerpipe Controls:
gcp_compliance.control.require_bucket_policy_only,gcp_compliance.control.storage_bucket_uniform_access_enabled - KICS Query:
bb0db090-5509-4853-a827-75ced0b3caa0 - Trivy Check:
GCP-0002
Last reviewed: 2026-10-10