This page describes how to configure a Cloud Storage bucket to host a static website for a domain you own. Static web pages can contain client-side technologies such as HTML, CSS, and JavaScript. They cannot contain dynamic content such as server-side scripts like PHP. ## Overview Because Cloud Storage doesn't support custom domains with HTTPS on its own, this tutorial uses Cloud Storage with an [external Application Load Balancer](https://docs.cloud.google.com/load-balancing/docs/https) to serve content from a custom domain over HTTPS. For more ways to serve content from a custom domain over HTTPS, see [troubleshooting for HTTPS serving](https://docs.cloud.google.com/storage/docs/troubleshooting#https). You can also [use Cloud Storage to serve custom domain content over HTTP](https://docs.cloud.google.com/storage/docs/hosting-static-website-http), which doesn't require a load balancer. For examples and tips on static web pages, including how to host static assets for a dynamic website, see the [Static Website page](https://docs.cloud.google.com/storage/docs/static-website). > [!CAUTION] > **Caution:** This tutorial makes content available to the public internet. We recommend that you don't serve content that contains sensitive or private data from your Cloud Storage bucket. The instructions in this tutorial describe how to perform the following steps: - Upload and share your site's files. - Set up a load balancer and SSL certificate. - Connect your load balancer to your bucket. - Point your domain to your load balancer using an `A` record. - Test the website. ## Pricing The instructions in this tutorial use the following billable components of Google Cloud: - [Cloud Storage](https://docs.cloud.google.com/storage/pricing) - [Cloud Load Balancing](https://docs.cloud.google.com/vpc/network-pricing#lb) See the [Monitoring your charges](https://docs.cloud.google.com/storage/docs/static-website#tip-charges) tip for details on what charges may be incurred when hosting a static website. ## Access to bucket data You can host a static website using a bucket whose objects are readable to the public. To host a static website using Cloud Storage, you can use any of the following methods: - Create a new bucket whose data can be accessed publicly. During bucket creation, clear the box labeled **Enforce public access prevention on this bucket** . Doing this disables [public access prevention](https://docs.cloud.google.com/storage/docs/public-access-prevention) for the bucket. After creating the bucket, grant the Storage Object Viewer role to the `allUsers` principal. For more information, see [Create a bucket](https://docs.cloud.google.com/storage/docs/creating-buckets). - Make the data of an existing bucket public. For more information, see [Share your files](https://docs.cloud.google.com/storage/docs/hosting-static-website#sharing). - Create a private bucket as the backend to serve content through Cloud Load Balancing and Cloud CDN. For more information, see [private bucket access for global external Application Load Balancer](https://docs.cloud.google.com/load-balancing/docs/https/setup-global-ext-https-buckets#enable_private_bucket_access), [private bucket access for classic Application Load Balancer](https://docs.cloud.google.com/load-balancing/docs/https/ext-load-balancer-backend-buckets#enable_private_bucket_access), and [private bucket access for Cloud CDN](https://docs.cloud.google.com/cdn/docs/configure-private-bucket-access). The instructions in this tutorial show you how to make the data of an existing bucket public. ## Before you begin 1. Enable the [Compute Engine API](https://console.cloud.google.com/marketplace/product/google/compute.googleapis.com) for your project. 2. Have the following Identity and Access Management roles: [Storage Admin](https://docs.cloud.google.com/storage/docs/access-control/iam-roles) and [Compute Network Admin](https://docs.cloud.google.com/compute/docs/access/iam#compute.networkAdmin). 3. Have a domain that you own or manage. If you don't have an existing domain, there are many services through which you can register a new domain, such as [Cloud Domains](https://docs.cloud.google.com/domains/docs). This tutorial uses the domain `example.com`. 4. Have a few website files you want to serve. This tutorial works best if you have at least an index page (`index.html`) and a 404 page (`404.html`). 5. Have a Cloud Storage bucket for storing the files you want to serve. If you don't currently have a bucket, [create a bucket](https://docs.cloud.google.com/storage/docs/creating-buckets). 6. (Optional) If you want your Cloud Storage bucket to have the same name as your domain, you must [verify that you own or manage the domain that you will be using](https://docs.cloud.google.com/storage/docs/domain-name-verification#verification). Make sure you are verifying the top-level domain, such as `example.com`, and not a subdomain, such as `www.example.com`. If you purchased your domain through Cloud Domains, verification is automatic. > [!NOTE] > **Note:** For information about using Cloud DNS to set up your domain, see [Set up your domain using Cloud DNS](https://docs.cloud.google.com/dns/docs/tutorials/create-domain-tutorial#set-up-domain). ## Upload your site's files Add the files you want your website to serve to the bucket: ### Console 1. In the Google Cloud console, go to the Cloud Storage **Buckets** page. [Go to Buckets](https://console.cloud.google.com/storage/browser) 2. In the list of buckets, click the name of the bucket that you created. The **Bucket details** page opens with the **Objects** tab selected. 3. Click the **Upload files** button. 4. In the file dialog, browse to the desired file and select it. After the upload completes, you should see the filename along with file information displayed in the bucket. To learn how to get detailed error information about failed Cloud Storage operations in the Google Cloud console, see [Troubleshooting](https://docs.cloud.google.com/storage/docs/troubleshooting#trouble-console). ### Command line Use the [`gcloud storage cp`](https://docs.cloud.google.com/sdk/gcloud/reference/storage/cp) command to copy files to your bucket. For example, to copy the file `index.html` from its current location `Desktop` to the bucket `my-static-assets`: ``` gcloud storage cp Desktop/index.html gs://my-static-assets ``` If successful, the response looks like the following example: ``` Completed files 1/1 | 164.3kiB/164.3kiB ``` ### Client libraries ### C++ For more information, see the [Cloud Storage C++ API reference documentation](https://docs.cloud.google.com/cpp/docs/reference/storage/latest). To authenticate to Cloud Storage, set up Application Default Credentials. For more information, see [Set up authentication for client libraries](https://docs.cloud.google.com/storage/docs/authentication#client-libs). namespace gcs = ::google::cloud::storage; using ::google::cloud::StatusOr; [](gcs::Client client, std::string const& file_name, std::string const& bucket_name, std::string const& object_name) { // Note that the client library automatically computes a hash on the // client-side to verify data integrity during transmission. StatusOr metadata = client.UploadFile( file_name, bucket_name, object_name, gcs::IfGenerationMatch(0)); if (!metadata) throw std::move(metadata).status(); std::cout << "Uploaded " << file_name << " to object " << metadata->name() << " in bucket " << metadata->bucket() << "\nFull metadata: " << *metadata << "\n"; } ### C# For more information, see the [Cloud Storage C# API reference documentation](https://cloud.google.com/dotnet/docs/reference/Google.Cloud.Storage.V1/latest). To authenticate to Cloud Storage, set up Application Default Credentials. For more information, see [Set up authentication for client libraries](https://docs.cloud.google.com/storage/docs/authentication#client-libs). using https://docs.cloud.google.com/dotnet/docs/reference/Google.Cloud.Storage.V1/latest/Google.Cloud.Storage.V1.html; using System; using System.IO; public class UploadFileSample { public void UploadFile( string bucketName = "your-unique-bucket-name", string localPath = "my-local-path/my-file-name", string objectName = "my-file-name") { var storage = https://docs.cloud.google.com/dotnet/docs/reference/Google.Cloud.Storage.V1/latest/Google.Cloud.Storage.V1.StorageClient.html.https://docs.cloud.google.com/dotnet/docs/reference/Google.Cloud.Storage.V1/latest/Google.Cloud.Storage.V1.StorageClient.html#Google_Cloud_Storage_V1_StorageClient_Create(); using var fileStream = File.OpenRead(localPath); storage.UploadObject(bucketName, objectName, null, fileStream); Console.WriteLine($"Uploaded {objectName}."); } } ### Go For more information, see the [Cloud Storage Go API reference documentation](https://pkg.go.dev/cloud.google.com/go/storage). To authenticate to Cloud Storage, set up Application Default Credentials. For more information, see [Set up authentication for client libraries](https://docs.cloud.google.com/storage/docs/authentication#client-libs). import ( "context" "fmt" "io" "os" "time" "cloud.google.com/go/storage" ) // uploadFile uploads an object. func uploadFile(w io.https://docs.cloud.google.com/go/docs/reference/cloud.google.com/go/storage/latest/index.html#cloud_google_com_go_storage_Writer, bucket, object string) error { // bucket := "bucket-name" // object := "object-name" ctx := context.Background() client, err := storage.NewClient(ctx) if err != nil { return fmt.Errorf("storage.NewClient: %w", err) } defer client.Close() // Open local file. f, err := os.Open("notes.txt") if err != nil { return fmt.Errorf("os.Open: %w", err) } defer f.Close() ctx, cancel := context.WithTimeout(ctx, time.Second*50) defer cancel() o := client.https://docs.cloud.google.com/go/docs/reference/cloud.google.com/go/storage/latest/index.html#cloud_google_com_go_storage_Client_Bucket(bucket).https://docs.cloud.google.com/go/docs/reference/cloud.google.com/go/storage/latest/index.html#cloud_google_com_go_storage_BucketHandle_Object(object) // Optional: set a generation-match precondition to avoid potential race // conditions and data corruptions. The request to upload is aborted if the // object's generation number does not match your precondition. // For an object that does not yet exist, set the DoesNotExist precondition. o = o.If(storage.https://docs.cloud.google.com/go/docs/reference/cloud.google.com/go/storage/latest/index.html#cloud_google_com_go_storage_Conditions{DoesNotExist: true}) // If the live object already exists in your bucket, set instead a // generation-match precondition using the live object's generation number. // attrs, err := o.Attrs(ctx) // if err != nil { // return fmt.Errorf("object.Attrs: %w", err) // } // o = o.If(storage.Conditions{GenerationMatch: attrs.Generation}) // Upload an object with storage.Writer. wc := o.https://docs.cloud.google.com/go/docs/reference/cloud.google.com/go/storage/latest/index.html#cloud_google_com_go_storage_ObjectHandle_NewWriter(ctx) if _, err = io.Copy(wc, f); err != nil { return fmt.Errorf("io.Copy: %w", err) } if err := wc.Close(); err != nil { return fmt.Errorf("Writer.Close: %w", err) } fmt.Fprintf(w, "Blob %v uploaded.\n", object) return nil } ### Java For more information, see the [Cloud Storage Java API reference documentation](https://cloud.google.com/java/docs/reference/google-cloud-storage/latest/overview). To authenticate to Cloud Storage, set up Application Default Credentials. For more information, see [Set up authentication for client libraries](https://docs.cloud.google.com/storage/docs/authentication#client-libs). The following sample uploads an individual object: import com.google.cloud.storage.https://docs.cloud.google.com/java/docs/reference/google-cloud-storage/latest/com.google.cloud.storage.BlobId.html; import com.google.cloud.storage.https://docs.cloud.google.com/java/docs/reference/google-cloud-storage/latest/com.google.cloud.storage.BlobInfo.html; import com.google.cloud.storage.https://docs.cloud.google.com/java/docs/reference/google-cloud-storage/latest/com.google.cloud.storage.Storage.html; import com.google.cloud.storage.https://docs.cloud.google.com/java/docs/reference/google-cloud-storage/latest/com.google.cloud.storage.StorageOptions.html; import java.io.IOException; import java.nio.file.Paths; public class UploadObject { public static void uploadObject( String projectId, String bucketName, String objectName, String filePath) throws IOException { // The ID of your GCP project // String projectId = "your-project-id"; // The ID of your GCS bucket // String bucketName = "your-unique-bucket-name"; // The ID of your GCS object // String objectName = "your-object-name"; // The path to your file to upload // String filePath = "path/to/your/file" https://docs.cloud.google.com/java/docs/reference/google-cloud-storage/latest/com.google.cloud.storage.Storage.html storage = https://docs.cloud.google.com/java/docs/reference/google-cloud-storage/latest/com.google.cloud.storage.StorageOptions.html.newBuilder().setProjectId(projectId).build().https://docs.cloud.google.com/java/docs/reference/google-cloud-storage/latest/com.google.cloud.storage.transfermanager.TransferManagerConfig.html#com_google_cloud_storage_transfermanager_TransferManagerConfig_getService__(); https://docs.cloud.google.com/java/docs/reference/google-cloud-storage/latest/com.google.cloud.storage.BlobId.html blobId = https://docs.cloud.google.com/java/docs/reference/google-cloud-storage/latest/com.google.cloud.storage.BlobId.html.of(bucketName, objectName); https://docs.cloud.google.com/java/docs/reference/google-cloud-storage/latest/com.google.cloud.storage.BlobInfo.html blobInfo = https://docs.cloud.google.com/java/docs/reference/google-cloud-storage/latest/com.google.cloud.storage.BlobInfo.html.newBuilder(blobId).build(); // Optional: set a generation-match precondition to avoid potential race // conditions and data corruptions. The request returns a 412 error if the // preconditions are not met. https://docs.cloud.google.com/java/docs/reference/google-cloud-storage/latest/com.google.cloud.storage.Storage.html.BlobWriteOption precondition; if (storage.https://docs.cloud.google.com/java/docs/reference/google-cloud-storage/latest/com.google.cloud.storage.Storage.html#com_google_cloud_storage_Storage_get_com_google_cloud_storage_BlobId_(bucketName, objectName) == null) { // For a target object that does not yet exist, set the DoesNotExist precondition. // This will cause the request to fail if the object is created before the request runs. precondition = https://docs.cloud.google.com/java/docs/reference/google-cloud-storage/latest/com.google.cloud.storage.Storage.html.BlobWriteOption.doesNotExist(); } else { // If the destination already exists in your bucket, instead set a generation-match // precondition. This will cause the request to fail if the existing object's generation // changes before the request runs. precondition = https://docs.cloud.google.com/java/docs/reference/google-cloud-storage/latest/com.google.cloud.storage.Storage.html.BlobWriteOption.generationMatch( storage.https://docs.cloud.google.com/java/docs/reference/google-cloud-storage/latest/com.google.cloud.storage.Storage.html#com_google_cloud_storage_Storage_get_com_google_cloud_storage_BlobId_(bucketName, objectName).getGeneration()); } storage.https://docs.cloud.google.com/java/docs/reference/google-cloud-storage/latest/com.google.cloud.storage.Storage.html#com_google_cloud_storage_Storage_createFrom_com_google_cloud_storage_BlobInfo_java_io_InputStream_com_google_cloud_storage_Storage_BlobWriteOption____(blobInfo, Paths.get(filePath), precondition); System.out.println( "File " + filePath + " uploaded to bucket " + bucketName + " as " + objectName); } } The following sample uploads multiple objects concurrently: import com.google.cloud.storage.transfermanager.https://docs.cloud.google.com/java/docs/reference/google-cloud-storage/latest/com.google.cloud.storage.transfermanager.ParallelUploadConfig.html; import com.google.cloud.storage.transfermanager.https://docs.cloud.google.com/java/docs/reference/google-cloud-storage/latest/com.google.cloud.storage.transfermanager.TransferManager.html; import com.google.cloud.storage.transfermanager.https://docs.cloud.google.com/java/docs/reference/google-cloud-storage/latest/com.google.cloud.storage.transfermanager.TransferManagerConfig.html; import com.google.cloud.storage.transfermanager.https://docs.cloud.google.com/java/docs/reference/google-cloud-storage/latest/com.google.cloud.storage.transfermanager.UploadResult.html; import java.io.IOException; import java.nio.file.Path; import java.util.List; class UploadMany { public static void uploadManyFiles(String bucketName, List files) throws IOException { https://docs.cloud.google.com/java/docs/reference/google-cloud-storage/latest/com.google.cloud.storage.transfermanager.TransferManager.html transferManager = https://docs.cloud.google.com/java/docs/reference/google-cloud-storage/latest/com.google.cloud.storage.transfermanager.TransferManagerConfig.html.newBuilder().build().https://docs.cloud.google.com/java/docs/reference/google-cloud-storage/latest/com.google.cloud.storage.transfermanager.TransferManagerConfig.html#com_google_cloud_storage_transfermanager_TransferManagerConfig_getService__(); https://docs.cloud.google.com/java/docs/reference/google-cloud-storage/latest/com.google.cloud.storage.transfermanager.ParallelUploadConfig.html parallelUploadConfig = https://docs.cloud.google.com/java/docs/reference/google-cloud-storage/latest/com.google.cloud.storage.transfermanager.ParallelUploadConfig.html.newBuilder().setBucketName(bucketName).build(); List results = transferManager.https://docs.cloud.google.com/java/docs/reference/google-cloud-storage/latest/com.google.cloud.storage.transfermanager.TransferManager.html#com_google_cloud_storage_transfermanager_TransferManager_uploadFiles_java_util_List_java_nio_file_Path__com_google_cloud_storage_transfermanager_ParallelUploadConfig_(files, parallelUploadConfig).https://docs.cloud.google.com/java/docs/reference/google-cloud-storage/latest/com.google.cloud.storage.transfermanager.UploadJob.html#com_google_cloud_storage_transfermanager_UploadJob_getUploadResults__(); for (https://docs.cloud.google.com/java/docs/reference/google-cloud-storage/latest/com.google.cloud.storage.transfermanager.UploadResult.html result : results) { System.out.println( "Upload for " + result.getInput().getName() + " completed with status " + result.getStatus()); } } } The following sample uploads all objects with a common prefix concurrently: import com.google.cloud.storage.transfermanager.https://docs.cloud.google.com/java/docs/reference/google-cloud-storage/latest/com.google.cloud.storage.transfermanager.ParallelUploadConfig.html; import com.google.cloud.storage.transfermanager.https://docs.cloud.google.com/java/docs/reference/google-cloud-storage/latest/com.google.cloud.storage.transfermanager.TransferManager.html; import com.google.cloud.storage.transfermanager.https://docs.cloud.google.com/java/docs/reference/google-cloud-storage/latest/com.google.cloud.storage.transfermanager.TransferManagerConfig.html; import com.google.cloud.storage.transfermanager.https://docs.cloud.google.com/java/docs/reference/google-cloud-storage/latest/com.google.cloud.storage.transfermanager.UploadResult.html; import java.io.IOException; import java.nio.file.Files; import java.nio.file.Path; import java.util.ArrayList; import java.util.List; import java.util.stream.Stream; class UploadDirectory { public static void uploadDirectoryContents(String bucketName, Path sourceDirectory) throws IOException { https://docs.cloud.google.com/java/docs/reference/google-cloud-storage/latest/com.google.cloud.storage.transfermanager.TransferManager.html transferManager = https://docs.cloud.google.com/java/docs/reference/google-cloud-storage/latest/com.google.cloud.storage.transfermanager.TransferManagerConfig.html.newBuilder().build().https://docs.cloud.google.com/java/docs/reference/google-cloud-storage/latest/com.google.cloud.storage.transfermanager.TransferManagerConfig.html#com_google_cloud_storage_transfermanager_TransferManagerConfig_getService__(); https://docs.cloud.google.com/java/docs/reference/google-cloud-storage/latest/com.google.cloud.storage.transfermanager.ParallelUploadConfig.html parallelUploadConfig = https://docs.cloud.google.com/java/docs/reference/google-cloud-storage/latest/com.google.cloud.storage.transfermanager.ParallelUploadConfig.html.newBuilder().setBucketName(bucketName).build(); // Create a list to store the file paths List filePaths = new ArrayList<>(); // Get all files in the directory // try-with-resource to ensure pathStream is closed try (Stream pathStream = Files.walk(sourceDirectory)) { pathStream.filter(Files::isRegularFile).forEach(filePaths::add); } List results = transferManager.https://docs.cloud.google.com/java/docs/reference/google-cloud-storage/latest/com.google.cloud.storage.transfermanager.TransferManager.html#com_google_cloud_storage_transfermanager_TransferManager_uploadFiles_java_util_List_java_nio_file_Path__com_google_cloud_storage_transfermanager_ParallelUploadConfig_(filePaths, parallelUploadConfig).https://docs.cloud.google.com/java/docs/reference/google-cloud-storage/latest/com.google.cloud.storage.transfermanager.UploadJob.html#com_google_cloud_storage_transfermanager_UploadJob_getUploadResults__(); for (https://docs.cloud.google.com/java/docs/reference/google-cloud-storage/latest/com.google.cloud.storage.transfermanager.UploadResult.html result : results) { System.out.println( "Upload for " + result.getInput().getName() + " completed with status " + result.getStatus()); } } } ### Node.js For more information, see the [Cloud Storage Node.js API reference documentation](https://cloud.google.com/nodejs/docs/reference/storage/latest). To authenticate to Cloud Storage, set up Application Default Credentials. For more information, see [Set up authentication for client libraries](https://docs.cloud.google.com/storage/docs/authentication#client-libs). The following sample uploads an individual object: /** * TODO(developer): Uncomment the following lines before running the sample. */ // The ID of your GCS bucket // const bucketName = 'your-unique-bucket-name'; // The path to your file to upload // const filePath = 'path/to/your/file'; // The new ID for your GCS file // const destFileName = 'your-new-file-name'; // Imports the Google Cloud client library const {Storage} = require('https://docs.cloud.google.com/nodejs/docs/reference/storage/latest/overview.html'); // Creates a client const storage = new https://docs.cloud.google.com/nodejs/docs/reference/storage-control/latest/storage-control/protos.google.storage.v2.storage-class.html(); async function uploadFile() { const options = { destination: destFileName, // Optional: // Set a generation-match precondition to avoid potential race conditions // and data corruptions. The request to upload is aborted if the object's // generation number does not match your precondition. For a destination // object that does not yet exist, set the ifGenerationMatch precondition to 0 // If the destination object already exists in your bucket, set instead a // generation-match precondition using its generation number. preconditionOpts: {ifGenerationMatch: generationMatchPrecondition}, }; await storage.bucket(bucketName).https://docs.cloud.google.com/nodejs/docs/reference/storage/latest/storage/bucket.html(filePath, options); console.log(`${filePath} uploaded to ${bucketName}`); } uploadFile().catch(console.error); The following sample uploads multiple objects concurrently: /** * TODO(developer): Uncomment the following lines before running the sample. */ // The ID of your GCS bucket // const bucketName = 'your-unique-bucket-name'; // The ID of the first GCS file to upload // const firstFilePath = 'your-first-file-name'; // The ID of the second GCS file to upload // const secondFilePath = 'your-second-file-name'; // Imports the Google Cloud client library const {Storage, TransferManager} = require('https://docs.cloud.google.com/nodejs/docs/reference/storage/latest/overview.html'); // Creates a client const storage = new https://docs.cloud.google.com/nodejs/docs/reference/storage-control/latest/storage-control/protos.google.storage.v2.storage-class.html(); // Creates a transfer manager client const transferManager = new https://docs.cloud.google.com/nodejs/docs/reference/storage/latest/storage/transfermanager.html(storage.bucket(bucketName)); async function uploadManyFilesWithTransferManager() { // Uploads the files await transferManager.https://docs.cloud.google.com/nodejs/docs/reference/storage/latest/storage/transfermanager.html([firstFilePath, secondFilePath]); for (const filePath of [firstFilePath, secondFilePath]) { console.log(`${filePath} uploaded to ${bucketName}.`); } } uploadManyFilesWithTransferManager().catch(console.error); The following sample uploads all objects with a common prefix concurrently: /** * TODO(developer): Uncomment the following lines before running the sample. */ // The ID of your GCS bucket // const bucketName = 'your-unique-bucket-name'; // The local directory to upload // const directoryName = 'your-directory'; // Imports the Google Cloud client library const {Storage, TransferManager} = require('https://docs.cloud.google.com/nodejs/docs/reference/storage/latest/overview.html'); // Creates a client const storage = new https://docs.cloud.google.com/nodejs/docs/reference/storage-control/latest/storage-control/protos.google.storage.v2.storage-class.html(); // Creates a transfer manager client const transferManager = new https://docs.cloud.google.com/nodejs/docs/reference/storage/latest/storage/transfermanager.html(storage.bucket(bucketName)); async function uploadDirectoryWithTransferManager() { // Uploads the directory await transferManager.https://docs.cloud.google.com/nodejs/docs/reference/storage/latest/storage/transfermanager.html(directoryName); console.log(`${directoryName} uploaded to ${bucketName}.`); } uploadDirectoryWithTransferManager().catch(console.error); ### PHP For more information, see the [Cloud Storage PHP API reference documentation](https://googleapis.github.io/google-cloud-php/#/docs/google-cloud/latest/storage/storageclient). To authenticate to Cloud Storage, set up Application Default Credentials. For more information, see [Set up authentication for client libraries](https://docs.cloud.google.com/storage/docs/authentication#client-libs). use Google\Cloud\Storage\StorageClient; /** * Upload a file. * * @param string $bucketName The name of your Cloud Storage bucket. * (e.g. 'my-bucket') * @param string $objectName The name of your Cloud Storage object. * (e.g. 'my-object') * @param string $source The path to the file to upload. * (e.g. '/path/to/your/file') */ function upload_object(string $bucketName, string $objectName, string $source): void { $storage = new StorageClient(); if (!$file = fopen($source, 'r')) { throw new \InvalidArgumentException('Unable to open file for reading'); } $bucket = $storage->bucket($bucketName); $object = $bucket->upload($file, [ 'name' => $objectName ]); printf('Uploaded %s to gs://%s/%s' . PHP_EOL, basename($source), $bucketName, $objectName); } ### Python For more information, see the [Cloud Storage Python API reference documentation](https://cloud.google.com/python/docs/reference/storage/latest). To authenticate to Cloud Storage, set up Application Default Credentials. For more information, see [Set up authentication for client libraries](https://docs.cloud.google.com/storage/docs/authentication#client-libs). The following sample uploads an individual object: from google.cloud import https://docs.cloud.google.com/python/docs/reference/storage/latest def upload_blob(bucket_name, source_file_name, destination_blob_name): """Uploads a file to the bucket.""" # The ID of your GCS bucket # bucket_name = "your-bucket-name" # The path to your file to upload # source_file_name = "local/path/to/file" # The ID of your GCS object # destination_blob_name = "storage-object-name" storage_client = https://docs.cloud.google.com/python/docs/reference/storage/latest.https://docs.cloud.google.com/python/docs/reference/storage/latest/google.cloud.storage.client.Client.html() bucket = storage_client.https://docs.cloud.google.com/python/docs/reference/storage/latest/google.cloud.storage.client.Client.html#google_cloud_storage_client_Client_bucket(bucket_name) blob = bucket.blob(destination_blob_name) # Optional: set a generation-match precondition to avoid potential race conditions # and data corruptions. The request to upload is aborted if the object's # generation number does not match your precondition. For a destination # object that does not yet exist, set the if_generation_match precondition to 0. # If the destination object already exists in your bucket, set instead a # generation-match precondition using its generation number. generation_match_precondition = 0 blob.https://docs.cloud.google.com/python/docs/reference/storage/latest/google.cloud.storage.blob.Blob.html#google_cloud_storage_blob_Blob_upload_from_filename(source_file_name, if_generation_match=generation_match_precondition) print( f"File {source_file_name} uploaded to {destination_blob_name}." ) The following sample uploads multiple objects concurrently: def upload_many_blobs_with_transfer_manager( bucket_name, filenames, source_directory="", workers=8 ): """Upload every file in a list to a bucket, concurrently in a process pool. Each blob name is derived from the filename, not including the `source_directory` parameter. For complete control of the blob name for each file (and other aspects of individual blob metadata), use transfer_manager.upload_many() instead. """ # The ID of your GCS bucket # bucket_name = "your-bucket-name" # A list (or other iterable) of filenames to upload. # filenames = ["file_1.txt", "file_2.txt"] # The directory on your computer that is the root of all of the files in the # list of filenames. This string is prepended (with os.path.join()) to each # filename to get the full path to the file. Relative paths and absolute # paths are both accepted. This string is not included in the name of the # uploaded blob; it is only used to find the source files. An empty string # means "the current working directory". Note that this parameter allows # directory traversal (e.g. "/", "../") and is not intended for unsanitized # end user input. # source_directory="" # The maximum number of processes to use for the operation. The performance # impact of this value depends on the use case, but smaller files usually # benefit from a higher number of processes. Each additional process occupies # some CPU and memory resources until finished. Threads can be used instead # of processes by passing `worker_type=transfer_manager.THREAD`. # workers=8 from google.cloud.storage import https://docs.cloud.google.com/python/docs/reference/storage/latest/google.cloud.storage.client.Client.html, https://docs.cloud.google.com/python/docs/reference/storage/latest/google.cloud.storage.transfer_manager.html storage_client = Client() bucket = storage_client.https://docs.cloud.google.com/python/docs/reference/storage/latest/google.cloud.storage.client.Client.html#google_cloud_storage_client_Client_bucket(bucket_name) results = https://docs.cloud.google.com/python/docs/reference/storage/latest/google.cloud.storage.transfer_manager.html.https://docs.cloud.google.com/python/docs/reference/storage/latest/google.cloud.storage.transfer_manager.html( bucket, filenames, source_directory=source_directory, max_workers=workers ) for name, result in zip(filenames, results): # The results list is either `None` or an exception for each filename in # the input list, in order. if isinstance(result, Exception): print("Failed to upload {} due to exception: {}".format(name, result)) else: print("Uploaded {} to {}.".format(name, bucket.name)) The following sample uploads all objects with a common prefix concurrently: def upload_directory_with_transfer_manager(bucket_name, source_directory, workers=8): """Upload every file in a directory, including all files in subdirectories. Each blob name is derived from the filename, not including the `directory` parameter itself. For complete control of the blob name for each file (and other aspects of individual blob metadata), use transfer_manager.upload_many() instead. """ # The ID of your GCS bucket # bucket_name = "your-bucket-name" # The directory on your computer to upload. Files in the directory and its # subdirectories will be uploaded. An empty string means "the current # working directory". # source_directory="" # The maximum number of processes to use for the operation. The performance # impact of this value depends on the use case, but smaller files usually # benefit from a higher number of processes. Each additional process occupies # some CPU and memory resources until finished. Threads can be used instead # of processes by passing `worker_type=transfer_manager.THREAD`. # workers=8 from pathlib import Path from google.cloud.storage import https://docs.cloud.google.com/python/docs/reference/storage/latest/google.cloud.storage.client.Client.html, https://docs.cloud.google.com/python/docs/reference/storage/latest/google.cloud.storage.transfer_manager.html storage_client = Client() bucket = storage_client.https://docs.cloud.google.com/python/docs/reference/storage/latest/google.cloud.storage.client.Client.html#google_cloud_storage_client_Client_bucket(bucket_name) # Generate a list of paths (in string form) relative to the `directory`. # This can be done in a single list comprehension, but is expanded into # multiple lines here for clarity. # First, recursively get all files in `directory` as Path objects. directory_as_path_obj = Path(source_directory) paths = directory_as_path_obj.rglob("*") # Filter so the list only includes files, not directories themselves. file_paths = [path for path in paths if path.is_file()] # These paths are relative to the current working directory. Next, make them # relative to `directory` relative_paths = [path.relative_to(source_directory) for path in file_paths] # Finally, convert them all to strings. string_paths = [str(path) for path in relative_paths] print("Found {} files.".format(len(string_paths))) # Start the upload. results = https://docs.cloud.google.com/python/docs/reference/storage/latest/google.cloud.storage.transfer_manager.html.https://docs.cloud.google.com/python/docs/reference/storage/latest/google.cloud.storage.transfer_manager.html( bucket, string_paths, source_directory=source_directory, max_workers=workers ) for name, result in zip(string_paths, results): # The results list is either `None` or an exception for each filename in # the input list, in order. if isinstance(result, Exception): print("Failed to upload {} due to exception: {}".format(name, result)) else: print("Uploaded {} to {}.".format(name, bucket.name)) ### Ruby For more information, see the [Cloud Storage Ruby API reference documentation](https://googleapis.dev/ruby/google-cloud-storage/latest/Google/Cloud/Storage.html). To authenticate to Cloud Storage, set up Application Default Credentials. For more information, see [Set up authentication for client libraries](https://docs.cloud.google.com/storage/docs/authentication#client-libs). def upload_file bucket_name:, local_file_path:, file_name: nil # The ID of your GCS bucket # bucket_name = "your-unique-bucket-name" # The path to your file to upload # local_file_path = "/local/path/to/file.txt" # The ID of your GCS object # file_name = "your-file-name" require "google/cloud/storage" storage = Google::Cloud::https://docs.cloud.google.com/ruby/docs/reference/google-cloud-storage-control/latest/Google-Cloud-Storage.html.https://docs.cloud.google.com/ruby/docs/reference/google-cloud-storage/latest/Google-Cloud-Storage.html bucket = storage.bucket bucket_name, skip_lookup: true file = bucket.https://docs.cloud.google.com/ruby/docs/reference/google-cloud-storage/latest/Google-Cloud-Storage-Bucket.html local_file_path, file_name puts "Uploaded #{local_file_path} as #{file.name} in bucket #{bucket_name}" end ### Rust use google_cloud_storage::client::Storage; pub async fn sample( client: &Storage, bucket: &str, object: &str, file_path: &str, ) -> Result<(), anyhow::Error> { let payload = tokio::fs::File::open(file_path).await?; let _result = client .write_object(format!("projects/_/buckets/{bucket}"), object, payload) .send_unbuffered() .await?; println!("Uploaded {file_path} to {object} in bucket {bucket}."); Ok(()) }
### Terraform # Upload a simple index.html page to the bucket resource "google_storage_bucket_object" "indexpage" { name = "index.html" content = "Hello World!" content_type = "text/html" bucket = google_storage_bucket.static_website.id } # Upload a simple 404 / error page to the bucket resource "google_storage_bucket_object" "errorpage" { name = "404.html" content = "404!" content_type = "text/html" bucket = google_storage_bucket.static_website.id } ### REST APIs ### JSON API 1. Have gcloud CLI [installed and initialized](https://docs.cloud.google.com/sdk/docs/install), which lets you generate an access token for the `Authorization` header. 2. Use [`cURL`](http://curl.haxx.se/) to call the [JSON API](https://docs.cloud.google.com/storage/docs/json_api) with a [`POST` Object](https://docs.cloud.google.com/storage/docs/json_api/v1/objects/insert) request. For the file `index.html` uploaded to a bucket named `my-static-assets`: ``` curl -X POST --data-binary @index.html \ -H "Content-Type: text/html" \ -H "Authorization: Bearer $(gcloud auth print-access-token)" \ "https://storage.googleapis.com/upload/storage/v1/b/my-static-assets/o?uploadType=media&name=index.html" ``` ### XML API 1. Have gcloud CLI [installed and initialized](https://docs.cloud.google.com/sdk/docs/install), which lets you generate an access token for the `Authorization` header. 2. Use [`cURL`](http://curl.haxx.se/) to call the [XML API](https://docs.cloud.google.com/storage/docs/xml-api/overview) with a [`PUT` Object](https://docs.cloud.google.com/storage/docs/xml-api/put-object-upload) request. For the file `index.html` uploaded to a bucket named `my-static-assets`: ``` curl -X PUT --data-binary @index.html \ -H "Authorization: Bearer $(gcloud auth print-access-token)" \ -H "Content-Type: text/html" \ "https://storage.googleapis.com/my-static-assets/index.html" ``` ## Share your files To make all objects in your bucket readable to anyone on the public internet: > [!CAUTION] > **Caution:** Before making your bucket publicly accessible, make sure that the files in your bucket don't contain sensitive or private information. ### Console 1. In the Google Cloud console, go to the Cloud Storage **Buckets** page. [Go to Buckets](https://console.cloud.google.com/storage/browser) 2. In the list of buckets, click the name of the bucket that you want to make public. 3. Select the **Permissions** tab near the top of the page. 4. If the **Public access** pane reads **Not public** , click the button labeled **Remove public access prevention** and click **Confirm** in the dialog that appears. 5. Click the **Grant access** button. The *Add principals* dialog appears. 6. In the **New principals** field, enter `allUsers`. 7. In the **Select a role** drop-down, select the **Cloud Storage** sub-menu, and click the **Storage Object Viewer** option. 8. Click **Save**. 9. Click **Allow public access**. Once shared publicly, a **link** icon appears for each object in the *public access* column. You can click this icon to get the URL for the object. To learn how to get detailed error information about failed Cloud Storage operations in the Google Cloud console, see [Troubleshooting](https://docs.cloud.google.com/storage/docs/troubleshooting#trouble-console). ### Command line Use the [`buckets add-iam-policy-binding`](https://docs.cloud.google.com/sdk/gcloud/reference/storage/buckets/add-iam-policy-binding) command: ``` gcloud storage buckets add-iam-policy-binding gs://my-static-assets --member=allUsers --role=roles/storage.objectViewer ``` ### Client libraries ### C++ For more information, see the [Cloud Storage C++ API reference documentation](https://docs.cloud.google.com/cpp/docs/reference/storage/latest). To authenticate to Cloud Storage, set up Application Default Credentials. For more information, see [Set up authentication for client libraries](https://docs.cloud.google.com/storage/docs/authentication#client-libs). namespace gcs = ::google::cloud::storage; using ::google::cloud::StatusOr; [](gcs::Client client, std::string const& bucket_name) { auto current_policy = client.GetNativeBucketIamPolicy( bucket_name, gcs::RequestedPolicyVersion(3)); if (!current_policy) throw std::move(current_policy).status(); current_policy->set_version(3); current_policy->bindings().emplace_back( gcs::NativeIamBinding("roles/storage.objectViewer", {"allUsers"})); auto updated = client.SetNativeBucketIamPolicy(bucket_name, *current_policy); if (!updated) throw std::move(updated).status(); std::cout << "Policy successfully updated: " << *updated << "\n"; } ### C# For more information, see the [Cloud Storage C# API reference documentation](https://cloud.google.com/dotnet/docs/reference/Google.Cloud.Storage.V1/latest). To authenticate to Cloud Storage, set up Application Default Credentials. For more information, see [Set up authentication for client libraries](https://docs.cloud.google.com/storage/docs/authentication#client-libs). using Google.Apis.Storage.v1.Data; using https://docs.cloud.google.com/dotnet/docs/reference/Google.Cloud.Storage.V1/latest/Google.Cloud.Storage.V1.html; using System; using System.Collections.Generic; public class MakeBucketPublicSample { public void MakeBucketPublic(string bucketName = "your-unique-bucket-name") { var storage = https://docs.cloud.google.com/dotnet/docs/reference/Google.Cloud.Storage.V1/latest/Google.Cloud.Storage.V1.StorageClient.html.https://docs.cloud.google.com/dotnet/docs/reference/Google.Cloud.Storage.V1/latest/Google.Cloud.Storage.V1.StorageClient.html#Google_Cloud_Storage_V1_StorageClient_Create(); Policy policy = storage.GetBucketIamPolicy(bucketName); policy.Bindings.Add(new Policy.BindingsData { Role = "roles/storage.objectViewer", Members = new List { "allUsers" } }); storage.SetBucketIamPolicy(bucketName, policy); Console.WriteLine(bucketName + " is now public "); } } ### Go For more information, see the [Cloud Storage Go API reference documentation](https://pkg.go.dev/cloud.google.com/go/storage). To authenticate to Cloud Storage, set up Application Default Credentials. For more information, see [Set up authentication for client libraries](https://docs.cloud.google.com/storage/docs/authentication#client-libs). import ( "context" "fmt" "io" "cloud.google.com/go/iam" "cloud.google.com/go/iam/apiv1/iampb" "cloud.google.com/go/storage" ) // setBucketPublicIAM makes all objects in a bucket publicly readable. func setBucketPublicIAM(w io.https://docs.cloud.google.com/go/docs/reference/cloud.google.com/go/storage/latest/index.html#cloud_google_com_go_storage_Writer, bucketName string) error { // bucketName := "bucket-name" ctx := context.Background() client, err := storage.NewClient(ctx) if err != nil { return fmt.Errorf("storage.NewClient: %w", err) } defer client.Close() policy, err := client.https://docs.cloud.google.com/go/docs/reference/cloud.google.com/go/storage/latest/index.html#cloud_google_com_go_storage_Client_Bucket(bucketName).https://docs.cloud.google.com/go/docs/reference/cloud.google.com/go/storage/latest/index.html#cloud_google_com_go_storage_BucketHandle_IAM().https://docs.cloud.google.com/go/docs/reference/cloud.google.com/go/iam/latest/index.html#cloud_google_com_go_iam_Handle_V3().Policy(ctx) if err != nil { return fmt.Errorf("Bucket(%q).IAM().V3().Policy: %w", bucketName, err) } role := "roles/storage.objectViewer" policy.Bindings = append(policy.Bindings, &iampb.Binding{ Role: role, Members: []string{iam.https://docs.cloud.google.com/go/docs/reference/cloud.google.com/go/iam/latest/index.html#cloud_google_com_go_iam_AllUsers_AllAuthenticatedUsers}, }) if err := client.https://docs.cloud.google.com/go/docs/reference/cloud.google.com/go/storage/latest/index.html#cloud_google_com_go_storage_Client_Bucket(bucketName).https://docs.cloud.google.com/go/docs/reference/cloud.google.com/go/storage/latest/index.html#cloud_google_com_go_storage_BucketHandle_IAM().https://docs.cloud.google.com/go/docs/reference/cloud.google.com/go/iam/latest/index.html#cloud_google_com_go_iam_Handle_V3().SetPolicy(ctx, policy); err != nil { return fmt.Errorf("Bucket(%q).IAM().SetPolicy: %w", bucketName, err) } fmt.Fprintf(w, "Bucket %v is now publicly readable\n", bucketName) return nil } ### Java For more information, see the [Cloud Storage Java API reference documentation](https://cloud.google.com/java/docs/reference/google-cloud-storage/latest/overview). To authenticate to Cloud Storage, set up Application Default Credentials. For more information, see [Set up authentication for client libraries](https://docs.cloud.google.com/storage/docs/authentication#client-libs). import com.google.cloud.https://docs.cloud.google.com/java/docs/reference/google-cloud-storageinsights/latest/com.google.cloud.storageinsights.v1.Identity.html; import com.google.cloud.https://docs.cloud.google.com/java/docs/reference/google-cloud-compute/latest/com.google.cloud.compute.v1.Policy.html; import com.google.cloud.storage.https://docs.cloud.google.com/java/docs/reference/google-cloud-storage/latest/com.google.cloud.storage.Storage.html; import com.google.cloud.storage.https://docs.cloud.google.com/java/docs/reference/google-cloud-storage/latest/com.google.cloud.storage.StorageOptions.html; import com.google.cloud.storage.https://docs.cloud.google.com/java/docs/reference/google-cloud-storage/latest/com.google.cloud.storage.StorageRoles.html; public class MakeBucketPublic { public static void makeBucketPublic(https://docs.cloud.google.com/java/docs/reference/google-cloud-bigtable/latest/com.google.cloud.bigtable.common.Type.String.html projectId, https://docs.cloud.google.com/java/docs/reference/google-cloud-bigtable/latest/com.google.cloud.bigtable.common.Type.String.html bucketName) { // The ID of your GCP project // String projectId = "your-project-id"; // The ID of your GCS bucket // String bucketName = "your-unique-bucket-name"; https://docs.cloud.google.com/java/docs/reference/google-cloud-storage/latest/com.google.cloud.storage.Storage.html storage = https://docs.cloud.google.com/java/docs/reference/google-cloud-storage/latest/com.google.cloud.storage.StorageOptions.html.newBuilder().setProjectId(projectId).build().getService(); https://docs.cloud.google.com/java/docs/reference/google-cloud-compute/latest/com.google.cloud.compute.v1.Policy.html originalPolicy = storage.https://docs.cloud.google.com/java/docs/reference/google-cloud-storage/latest/com.google.cloud.storage.Storage.html#com_google_cloud_storage_Storage_getIamPolicy_java_lang_String_com_google_cloud_storage_Storage_BucketSourceOption____(bucketName); storage.https://docs.cloud.google.com/java/docs/reference/google-cloud-storage/latest/com.google.cloud.storage.Storage.html#com_google_cloud_storage_Storage_setIamPolicy_java_lang_String_com_google_cloud_Policy_com_google_cloud_storage_Storage_BucketSourceOption____( bucketName, originalPolicy.toBuilder() .addIdentity(StorageRoles.objectViewer(), Identity.allUsers()) // All users can view .build()); System.out.println("Bucket " + bucketName + " is now publicly readable"); } } ### Node.js For more information, see the [Cloud Storage Node.js API reference documentation](https://cloud.google.com/nodejs/docs/reference/storage/latest). To authenticate to Cloud Storage, set up Application Default Credentials. For more information, see [Set up authentication for client libraries](https://docs.cloud.google.com/storage/docs/authentication#client-libs). /** * TODO(developer): Uncomment the following lines before running the sample. */ // The ID of your GCS bucket // const bucketName = 'your-unique-bucket-name'; // Imports the Google Cloud client library const {Storage} = require('https://docs.cloud.google.com/nodejs/docs/reference/storage/latest/overview.html'); // Creates a client const storage = new https://docs.cloud.google.com/nodejs/docs/reference/storage-control/latest/storage-control/protos.google.storage.v2.storage-class.html(); async function makeBucketPublic() { await storage.bucket(bucketName).makePublic(); console.log(`Bucket ${bucketName} is now publicly readable`); } makeBucketPublic().catch(console.error); ### PHP For more information, see the [Cloud Storage PHP API reference documentation](https://googleapis.github.io/google-cloud-php/#/docs/google-cloud/latest/storage/storageclient). To authenticate to Cloud Storage, set up Application Default Credentials. For more information, see [Set up authentication for client libraries](https://docs.cloud.google.com/storage/docs/authentication#client-libs). use Google\Cloud\Storage\StorageClient; /** * Update the specified bucket's IAM configuration to make it publicly accessible. * * @param string $bucketName The name of your Cloud Storage bucket. * (e.g. 'my-bucket') */ function set_bucket_public_iam(string $bucketName): void { $storage = new StorageClient(); $bucket = $storage->bucket($bucketName); $policy = $bucket->iam()->policy(['requestedPolicyVersion' => 3]); $policy['version'] = 3; $role = 'roles/storage.objectViewer'; $members = ['allUsers']; $policy['bindings'][] = [ 'role' => $role, 'members' => $members ]; $bucket->iam()->setPolicy($policy); printf('Bucket %s is now public', $bucketName); } ### Python For more information, see the [Cloud Storage Python API reference documentation](https://cloud.google.com/python/docs/reference/storage/latest). To authenticate to Cloud Storage, set up Application Default Credentials. For more information, see [Set up authentication for client libraries](https://docs.cloud.google.com/storage/docs/authentication#client-libs). from typing import List from google.cloud import https://docs.cloud.google.com/python/docs/reference/storage/latest def set_bucket_public_iam( bucket_name: str = "your-bucket-name", members: List[str] = ["allUsers"], ): """Set a public IAM Policy to bucket""" # bucket_name = "your-bucket-name" storage_client = https://docs.cloud.google.com/python/docs/reference/storage/latest.https://docs.cloud.google.com/python/docs/reference/storage/latest/google.cloud.storage.client.Client.html() bucket = storage_client.https://docs.cloud.google.com/python/docs/reference/storage/latest/google.cloud.storage.client.Client.html#google_cloud_storage_client_Client_bucket(bucket_name) policy = bucket.get_iam_policy(requested_policy_version=3) policy.bindings.append( {"role": "roles/storage.objectViewer", "members": members} ) bucket.set_iam_policy(policy) print(f"Bucket {bucket.name} is now publicly readable") ### Ruby For more information, see the [Cloud Storage Ruby API reference documentation](https://googleapis.dev/ruby/google-cloud-storage/latest/Google/Cloud/Storage.html). To authenticate to Cloud Storage, set up Application Default Credentials. For more information, see [Set up authentication for client libraries](https://docs.cloud.google.com/storage/docs/authentication#client-libs). def set_bucket_public_iam bucket_name: # The ID of your GCS bucket # bucket_name = "your-unique-bucket-name" require "google/cloud/storage" storage = Google::Cloud::https://docs.cloud.google.com/ruby/docs/reference/google-cloud-storage-control/latest/Google-Cloud-Storage.html.https://docs.cloud.google.com/ruby/docs/reference/google-cloud-storage/latest/Google-Cloud-Storage.html bucket = storage.bucket bucket_name bucket.https://docs.cloud.google.com/ruby/docs/reference/google-cloud-storage/latest/Google-Cloud-Storage-Bucket.html do |p| p.https://docs.cloud.google.com/ruby/docs/reference/google-cloud-storage/latest/Google-Cloud-Storage-PolicyV1.html "roles/storage.objectViewer", "allUsers" end puts "Bucket #{bucket_name} is now publicly readable" end ### Rust use google_cloud_iam_v1::model::{Binding, GetPolicyOptions}; use google_cloud_storage::client::StorageControl; pub async fn sample(client: &StorageControl, bucket_id: &str) -> anyhow::Result<()> { let mut policy = client .get_iam_policy() .set_resource(format!("projects/_/buckets/{bucket_id}")) .set_options(GetPolicyOptions::new().set_requested_policy_version(3)) .send() .await?; policy.version = 3; policy.bindings.push( Binding::new() .set_role("roles/storage.objectViewer") .set_members(["allUsers"]), ); let updated_policy = client .set_iam_policy() .set_resource(format!("projects/_/buckets/{bucket_id}")) .set_policy(policy) .send() .await?; println!( "Successfully set public IAM policy for bucket {}", bucket_id ); println!("The updated policy is: {:?}", updated_policy); Ok(()) }
### Terraform # Make bucket public by granting allUsers storage.objectViewer access resource "google_storage_bucket_iam_member" "public_rule" { bucket = google_storage_bucket.static_website.name role = "roles/storage.objectViewer" member = "allUsers" } ### REST APIs ### JSON API 1. Have gcloud CLI [installed and initialized](https://docs.cloud.google.com/sdk/docs/install), which lets you generate an access token for the `Authorization` header. 2. Create a JSON file that contains the following information: ```json { "bindings":[ { "role": "roles/storage.objectViewer", "members":["allUsers"] } ] } ``` 3. Use [`cURL`](http://curl.haxx.se/) to call the [JSON API](https://docs.cloud.google.com/storage/docs/json_api) with a [`PUT` Bucket](https://docs.cloud.google.com/storage/docs/json_api/v1/buckets/setIamPolicy) request: ``` curl -X PUT --data-binary @JSON_FILE_NAME \ -H "Authorization: Bearer $(gcloud auth print-access-token)" \ -H "Content-Type: application/json" \ "https://storage.googleapis.com/storage/v1/b/BUCKET_NAME/iam" ``` Where: - `JSON_FILE_NAME` is the path for the JSON file that you created in Step 2. - `BUCKET_NAME` is the name of the bucket whose objects you want to make public. For example, `my-static-assets`. ### XML API Making all objects in a bucket publicly readable is not supported by the XML API. Use the Google Cloud console or `gcloud storage` instead, or [set ACLs for each individual object](https://docs.cloud.google.com/storage/docs/xml-api/put-object-acls). Note that in order to set ACLs for each individual object, you must switch your bucket's **Access control** mode to **Fine-grained**. > [!NOTE] > **Note:** `roles/storage.objectViewer` includes permission to list the objects in the bucket. If you don't want to grant listing publicly, use [`roles/storage.legacyObjectReader`](https://docs.cloud.google.com/storage/docs/access-control/iam-roles#standard-roles). If wanted, you can alternatively [make portions of your bucket publicly accessible](https://docs.cloud.google.com/storage/docs/access-control/making-data-public#managed-folders) or [use a private bucket as the backend](https://docs.cloud.google.com/storage/docs/hosting-static-website#bucket-access) for content that's served only through Cloud Load Balancing and Cloud CDN. Visitors receive a `http 403` response code when requesting the URL for a non-public or non-existent file. See the next section for information on how to add an error page that uses a `http 404` response code. ## Recommended: assign specialty pages You can assign an index page suffix and a custom error page, which are known as specialty pages. Assigning either is optional, but if you don't assign an index page suffix and upload the corresponding index page, users who access your top-level site are served an XML document tree containing a list of the public objects in your bucket. For more information on the behavior of specialty pages, see [Specialty pages](https://docs.cloud.google.com/storage/docs/static-website#specialty_pages). ### Console 1. In the Google Cloud console, go to the Cloud Storage **Buckets** page. [Go to Buckets](https://console.cloud.google.com/storage/browser) 2. In the list of buckets, find the bucket you created. 3. Click the **Bucket overflow** menu () associated with the bucket and select **Edit website configuration**. 4. In the website configuration dialog, specify the main page and error page. 5. Click **Save**. > [!NOTE] > **Note:** View, change, or remove these settings from the **Edit website > configuration** menu. To learn how to get detailed error information about failed Cloud Storage operations in the Google Cloud console, see [Troubleshooting](https://docs.cloud.google.com/storage/docs/troubleshooting#trouble-console). ### Command line Use the [`buckets update`](https://docs.cloud.google.com/sdk/gcloud/reference/storage/buckets/update) command with the `--web-main-page-suffix` and `--web-error-page` flags. In the following sample, the `MainPageSuffix` is set to `index.html` and `NotFoundPage` is set to `404.html`: ```bash gcloud storage buckets update gs://my-static-assets --web-main-page-suffix=index.html --web-error-page=404.html ``` If successful, the command returns: ``` Updating gs://www.example.com/... Completed 1 ``` > [!NOTE] > **Note:** Change or remove these settings with additional `buckets update` commands and view these settings with the `buckets describe` command. ### Client libraries ### C++ For more information, see the [Cloud Storage C++ API reference documentation](https://docs.cloud.google.com/cpp/docs/reference/storage/latest). To authenticate to Cloud Storage, set up Application Default Credentials. For more information, see [Set up authentication for client libraries](https://docs.cloud.google.com/storage/docs/authentication#client-libs). namespace gcs = ::google::cloud::storage; using ::google::cloud::StatusOr; [](gcs::Client client, std::string const& bucket_name, std::string const& main_page_suffix, std::string const& not_found_page) { StatusOr original = client.GetBucketMetadata(bucket_name); if (!original) throw std::move(original).status(); StatusOr patched = client.PatchBucket( bucket_name, gcs::BucketMetadataPatchBuilder().SetWebsite( gcs::BucketWebsite{main_page_suffix, not_found_page}), gcs::IfMetagenerationMatch(original->metageneration())); if (!patched) throw std::move(patched).status(); if (!patched->has_website()) { std::cout << "Static website configuration is not set for bucket " << patched->name() << "\n"; return; } std::cout << "Static website configuration successfully set for bucket " << patched->name() << "\nNew main page suffix is: " << patched->website().main_page_suffix << "\nNew not found page is: " << patched->website().not_found_page << "\n"; } ### C# For more information, see the [Cloud Storage C# API reference documentation](https://cloud.google.com/dotnet/docs/reference/Google.Cloud.Storage.V1/latest). To authenticate to Cloud Storage, set up Application Default Credentials. For more information, see [Set up authentication for client libraries](https://docs.cloud.google.com/storage/docs/authentication#client-libs). using Google.Apis.Storage.v1.Data; using https://docs.cloud.google.com/dotnet/docs/reference/Google.Cloud.Storage.V1/latest/Google.Cloud.Storage.V1.html; using System; public class BucketWebsiteConfigurationSample { public Bucket BucketWebsiteConfiguration( string bucketName = "your-bucket-name", string mainPageSuffix = "index.html", string notFoundPage = "404.html") { var storage = https://docs.cloud.google.com/dotnet/docs/reference/Google.Cloud.Storage.V1/latest/Google.Cloud.Storage.V1.StorageClient.html.https://docs.cloud.google.com/dotnet/docs/reference/Google.Cloud.Storage.V1/latest/Google.Cloud.Storage.V1.StorageClient.html#Google_Cloud_Storage_V1_StorageClient_Create(); var bucket = storage.GetBucket(bucketName); if (bucket.Website == null) { bucket.Website = new Bucket.WebsiteData(); } bucket.Website.MainPageSuffix = mainPageSuffix; bucket.Website.NotFoundPage = notFoundPage; bucket = storage.UpdateBucket(bucket); Console.WriteLine($"Static website bucket {bucketName} is set up to use {mainPageSuffix} as the index page and {notFoundPage} as the 404 not found page."); return bucket; } } ### Go For more information, see the [Cloud Storage Go API reference documentation](https://pkg.go.dev/cloud.google.com/go/storage). To authenticate to Cloud Storage, set up Application Default Credentials. For more information, see [Set up authentication for client libraries](https://docs.cloud.google.com/storage/docs/authentication#client-libs). import ( "context" "fmt" "io" "time" "cloud.google.com/go/storage" ) // setBucketWebsiteInfo sets website configuration on a bucket. func setBucketWebsiteInfo(w io.https://docs.cloud.google.com/go/docs/reference/cloud.google.com/go/storage/latest/index.html#cloud_google_com_go_storage_Writer, bucketName, indexPage, notFoundPage string) error { // bucketName := "www.example.com" // indexPage := "index.html" // notFoundPage := "404.html" ctx := context.Background() client, err := storage.NewClient(ctx) if err != nil { return fmt.Errorf("storage.NewClient: %w", err) } defer client.Close() ctx, cancel := context.WithTimeout(ctx, time.Second*10) defer cancel() bucket := client.https://docs.cloud.google.com/go/docs/reference/cloud.google.com/go/storage/latest/index.html#cloud_google_com_go_storage_Client_Bucket(bucketName) bucketAttrsToUpdate := storage.https://docs.cloud.google.com/go/docs/reference/cloud.google.com/go/storage/latest/index.html#cloud_google_com_go_storage_BucketAttrsToUpdate{ Website: &storage.https://docs.cloud.google.com/go/docs/reference/cloud.google.com/go/storage/latest/index.html#cloud_google_com_go_storage_BucketWebsite{ MainPageSuffix: indexPage, NotFoundPage: notFoundPage, }, } if _, err := bucket.Update(ctx, bucketAttrsToUpdate); err != nil { return fmt.Errorf("Bucket(%q).Update: %w", bucketName, err) } fmt.Fprintf(w, "Static website bucket %v is set up to use %v as the index page and %v as the 404 page\n", bucketName, indexPage, notFoundPage) return nil } ### Java For more information, see the [Cloud Storage Java API reference documentation](https://cloud.google.com/java/docs/reference/google-cloud-storage/latest/overview). To authenticate to Cloud Storage, set up Application Default Credentials. For more information, see [Set up authentication for client libraries](https://docs.cloud.google.com/storage/docs/authentication#client-libs). import com.google.cloud.storage.https://docs.cloud.google.com/java/docs/reference/google-cloud-storage/latest/com.google.cloud.storage.Bucket.html; import com.google.cloud.storage.https://docs.cloud.google.com/java/docs/reference/google-cloud-storage/latest/com.google.cloud.storage.Storage.html; import com.google.cloud.storage.https://docs.cloud.google.com/java/docs/reference/google-cloud-storage/latest/com.google.cloud.storage.StorageOptions.html; public class SetBucketWebsiteInfo { public static void setBucketWesbiteInfo( String projectId, String bucketName, String indexPage, String notFoundPage) { // The ID of your GCP project // String projectId = "your-project-id"; // The ID of your static website bucket // String bucketName = "www.example.com"; // The index page for a static website bucket // String indexPage = "index.html"; // The 404 page for a static website bucket // String notFoundPage = "404.html"; https://docs.cloud.google.com/java/docs/reference/google-cloud-storage/latest/com.google.cloud.storage.Storage.html storage = https://docs.cloud.google.com/java/docs/reference/google-cloud-storage/latest/com.google.cloud.storage.StorageOptions.html.newBuilder().setProjectId(projectId).build().https://docs.cloud.google.com/java/docs/reference/google-cloud-storage/latest/com.google.cloud.storage.transfermanager.TransferManagerConfig.html#com_google_cloud_storage_transfermanager_TransferManagerConfig_getService__(); https://docs.cloud.google.com/java/docs/reference/google-cloud-storage/latest/com.google.cloud.storage.Bucket.html bucket = storage.https://docs.cloud.google.com/java/docs/reference/google-cloud-storage/latest/com.google.cloud.storage.Storage.html#com_google_cloud_storage_Storage_get_com_google_cloud_storage_BlobId_(bucketName); bucket.https://docs.cloud.google.com/java/docs/reference/google-cloud-storage/latest/com.google.cloud.storage.Bucket.html#com_google_cloud_storage_Bucket_toBuilder__().setIndexPage(indexPage).setNotFoundPage(notFoundPage).build().update(); System.out.println( "Static website bucket " + bucketName + " is set up to use " + indexPage + " as the index page and " + notFoundPage + " as the 404 page"); } } ### Node.js For more information, see the [Cloud Storage Node.js API reference documentation](https://cloud.google.com/nodejs/docs/reference/storage/latest). To authenticate to Cloud Storage, set up Application Default Credentials. For more information, see [Set up authentication for client libraries](https://docs.cloud.google.com/storage/docs/authentication#client-libs). /** * TODO(developer): Uncomment the following lines before running the sample. */ // The ID of your GCS bucket // const bucketName = 'your-unique-bucket-name'; // The name of the main page // const mainPageSuffix = 'http://example.com'; // The Name of a 404 page // const notFoundPage = 'http://example.com/404.html'; // Imports the Google Cloud client library const {Storage} = require('https://docs.cloud.google.com/nodejs/docs/reference/storage/latest/overview.html'); // Creates a client const storage = new https://docs.cloud.google.com/nodejs/docs/reference/storage-control/latest/storage-control/protos.google.storage.v2.storage-class.html(); async function addBucketWebsiteConfiguration() { await storage.bucket(bucketName).setMetadata({ website: { mainPageSuffix, notFoundPage, }, }); console.log( `Static website bucket ${bucketName} is set up to use ${mainPageSuffix} as the index page and ${notFoundPage} as the 404 page` ); } addBucketWebsiteConfiguration().catch(console.error); ### PHP For more information, see the [Cloud Storage PHP API reference documentation](https://googleapis.github.io/google-cloud-php/#/docs/google-cloud/latest/storage/storageclient). To authenticate to Cloud Storage, set up Application Default Credentials. For more information, see [Set up authentication for client libraries](https://docs.cloud.google.com/storage/docs/authentication#client-libs). use Google\Cloud\Storage\StorageClient; /** * Update the given bucket's website configuration. * * @param string $bucketName The name of your Cloud Storage bucket. * (e.g. 'my-bucket') * @param string $indexPageObject the name of an object in the bucket to use as * (e.g. 'index.html') * an index page for a static website bucket. * @param string $notFoundPageObject the name of an object in the bucket to use * (e.g. '404.html') * as the 404 Not Found page. */ function define_bucket_website_configuration(string $bucketName, string $indexPageObject, string $notFoundPageObject): void { $storage = new StorageClient(); $bucket = $storage->bucket($bucketName); $bucket->update([ 'website' => [ 'mainPageSuffix' => $indexPageObject, 'notFoundPage' => $notFoundPageObject ] ]); printf( 'Static website bucket %s is set up to use %s as the index page and %s as the 404 page.', $bucketName, $indexPageObject, $notFoundPageObject ); } ### Python For more information, see the [Cloud Storage Python API reference documentation](https://cloud.google.com/python/docs/reference/storage/latest). To authenticate to Cloud Storage, set up Application Default Credentials. For more information, see [Set up authentication for client libraries](https://docs.cloud.google.com/storage/docs/authentication#client-libs). from google.cloud import https://docs.cloud.google.com/python/docs/reference/storage/latest def define_bucket_website_configuration(bucket_name, main_page_suffix, not_found_page): """Configure website-related properties of bucket""" # bucket_name = "your-bucket-name" # main_page_suffix = "index.html" # not_found_page = "404.html" storage_client = https://docs.cloud.google.com/python/docs/reference/storage/latest.https://docs.cloud.google.com/python/docs/reference/storage/latest/google.cloud.storage.client.Client.html() bucket = storage_client.https://docs.cloud.google.com/python/docs/reference/storage/latest/google.cloud.storage.client.Client.html#google_cloud_storage_client_Client_get_bucket(bucket_name) bucket.https://docs.cloud.google.com/python/docs/reference/storage/latest/google.cloud.storage.bucket.Bucket.html#google_cloud_storage_bucket_Bucket_configure_website(main_page_suffix, not_found_page) bucket.patch() print( "Static website bucket {} is set up to use {} as the index page and {} as the 404 page".format( bucket.name, main_page_suffix, not_found_page ) ) return bucket ### Ruby For more information, see the [Cloud Storage Ruby API reference documentation](https://googleapis.dev/ruby/google-cloud-storage/latest/Google/Cloud/Storage.html). To authenticate to Cloud Storage, set up Application Default Credentials. For more information, see [Set up authentication for client libraries](https://docs.cloud.google.com/storage/docs/authentication#client-libs). def define_bucket_website_configuration bucket_name:, main_page_suffix:, not_found_page: # The ID of your static website bucket # bucket_name = "www.example.com" # The index page for a static website bucket # main_page_suffix = "index.html" # The 404 page for a static website bucket # not_found_page = "404.html" require "google/cloud/storage" storage = Google::Cloud::https://docs.cloud.google.com/ruby/docs/reference/google-cloud-storage-control/latest/Google-Cloud-Storage.html.https://docs.cloud.google.com/ruby/docs/reference/google-cloud-storage/latest/Google-Cloud-Storage.html bucket = storage.bucket bucket_name bucket.update do |b| b.https://docs.cloud.google.com/ruby/docs/reference/google-cloud-storage/latest/Google-Cloud-Storage-Bucket.html = main_page_suffix b.https://docs.cloud.google.com/ruby/docs/reference/google-cloud-storage/latest/Google-Cloud-Storage-Bucket.html = not_found_page end puts "Static website bucket #{bucket_name} is set up to use #{main_page_suffix} as the index page and " \ "#{not_found_page} as the 404 page" end ### Rust use google_cloud_storage::client::StorageControl; use google_cloud_storage::model::bucket::Website; use google_cloud_wkt::FieldMask; pub async fn sample( client: &StorageControl, bucket_id: &str, main_page_suffix: &str, not_found_page: &str, ) -> anyhow::Result<()> { let bucket = client .get_bucket() .set_name(format!("projects/_/buckets/{bucket_id}")) .send() .await?; let metageneration = bucket.metageneration; let website = Website::new() .set_main_page_suffix(main_page_suffix) .set_not_found_page(not_found_page); let bucket = client .update_bucket() .set_bucket(bucket.set_website(website)) .set_if_metageneration_match(metageneration) .set_update_mask(FieldMask::default().set_paths(["website"])) .send() .await?; println!( "Website configuration for bucket {} defined as: {:?}", bucket_id, bucket.website ); Ok(()) }
### REST APIs ### JSON API 1. Have gcloud CLI [installed and initialized](https://docs.cloud.google.com/sdk/docs/install), which lets you generate an access token for the `Authorization` header. 2. Create a JSON file that sets the `mainPageSuffix` and `notFoundPage` properties in a `website` object to the desired pages. In the following sample, the `mainPageSuffix` is set to `index.html` and `notFoundPage` is set to `404.html`: ```json { "website":{ "mainPageSuffix": "index.html", "notFoundPage": "404.html" } } ``` 3. Use [`cURL`](http://curl.haxx.se/) to call the [JSON API](https://docs.cloud.google.com/storage/docs/json_api) with a [`PATCH` Bucket](https://docs.cloud.google.com/storage/docs/json_api/v1/buckets/patch) request. For the bucket `my-static-assets`: ``` curl -X PATCH --data-binary @web-config.json \ -H "Authorization: Bearer $(gcloud auth print-access-token)" \ -H "Content-Type: application/json" \ "https://storage.googleapis.com/storage/v1/b/my-static-assets" ``` ### XML API 1. Have gcloud CLI [installed and initialized](https://docs.cloud.google.com/sdk/docs/install), which lets you generate an access token for the `Authorization` header. 2. Create an XML file that sets the `MainPageSuffix` and `NotFoundPage` elements in a `WebsiteConfiguration` element to the desired pages. In the following sample, the `MainPageSuffix` is set to `index.html` and `NotFoundPage` is set to `404.html`: ``` index.html 404.html ``` 3. Use [`cURL`](http://curl.haxx.se/) to call the [XML API](https://docs.cloud.google.com/storage/docs/xml-api/overview) with a [`PUT` Bucket](https://docs.cloud.google.com/storage/docs/xml-api/put-bucket-metadata) request and `websiteConfig` query string parameter. For `my-static-assets`: ``` curl -X PUT --data-binary @web-config.xml \ -H "Authorization: Bearer $(gcloud auth print-access-token)" \ https://storage.googleapis.com/my-static-assets?websiteConfig ``` > [!NOTE] > **Note:** Change or remove these settings with additional `PUT` requests and view these settings with a `GET` request. ## Set up your load balancer and SSL certificate Cloud Storage doesn't support custom domains with HTTPS on its own, so you also need to set up an [SSL certificate](https://docs.cloud.google.com/load-balancing/docs/ssl-certificates) attached to an [HTTPS load balancer](https://docs.cloud.google.com/load-balancing/docs/https) to serve your website through HTTPS. This section shows you how to add your bucket to a load balancer's backend and how to add a new [Google-managed SSL certificate](https://docs.cloud.google.com/load-balancing/docs/ssl-certificates/google-managed-certs) to the load balancer's frontend. #### Select the load balancer type 1. In the Google Cloud console, go to the **Load balancing** page. [Go to Load balancing](https://console.cloud.google.com/net-services/loadbalancing/list) 2. Click **Create load balancer**. 3. For **Type of load balancer** , select **Application Load Balancer (HTTP/HTTPS)** and click **Next**. 4. Click **Configure**. The configuration window for your load balancer appears. ### Basic configuration Before continuing with the configuration, enter a **Load balancer name** , such as `example-lb`. ### Configure the frontend This section shows you how to configure the HTTPS protocol and create an SSL certificate. You can also select an existing certificate or upload a [self-managed SSL certificate](https://docs.cloud.google.com/load-balancing/docs/ssl-certificates/self-managed-certs). 1. Click **Frontend configuration**. 2. (Optional) Give your frontend configuration a **Name**. 3. For **Protocol** , select **HTTPS (includes HTTP/2)**. 4. For **IP version** , select **IPv4** . If you prefer IPv6, see [IPv6 termination](https://docs.cloud.google.com/load-balancing/docs/ipv6) for additional information. 5. For the **IP address** field: - In the drop-down, click **Create IP address**. - In the **Reserve a new static IP address** dialog, enter a name, such as `example-ip` for the **Name** of the IP address. - Click **Reserve**. > [!NOTE] > **Note:** Reserving a new static IP address incurs [additional costs](https://docs.cloud.google.com/vpc/network-pricing#internal-ipaddress) if the IP address is not attached to a forwarding rule. To avoid such costs, [delete the static IP address](https://docs.cloud.google.com/storage/docs/hosting-static-website#deleting-ip) when you delete the associated load balancer. 6. For **Port** , select **443**. 7. In the **Certificate** field dropdown, select **Create a new certificate**. The certificate creation form appears in a panel. Configure the following: - Give your certificate a **Name** , such as `example-ssl`. - For **Create mode** , select **Create Google-managed certificate**. - For **Domains** , enter your website name, such as `www.example.com`. If you want to serve your content through additional domains such as the root domain `example.com`, press **Enter** to add them on additional lines. Each certificate has a [limit](https://docs.cloud.google.com/load-balancing/docs/quotas#ssl_certificates) of 100 domains. 8. Click **Create**. 9. (Optional) If you want Google Cloud to automatically set up a [partial HTTP load balancer](https://docs.cloud.google.com/load-balancing/docs/https/setting-up-http-https-redirect) for redirecting HTTP traffic, select the checkbox next to **Enable HTTP to HTTPS redirect**. 10. Click **Done**. ### Configure the backend 1. Click **Backend configuration**. 2. In the **Backend services \& backend buckets** dropdown, click **Create a backend bucket**. 3. Choose a **Backend bucket name** , such as `example-bucket`. The name you choose can be different from the name of the bucket you created earlier. 4. Click **Browse** , found in the **Cloud Storage bucket** field. 5. Select the `my-static-assets` bucket you created earlier, and click **Select**. 6. (Optional) If you want to use [Cloud CDN](https://docs.cloud.google.com/cdn/docs), select the checkbox for **Enable Cloud CDN** and configure Cloud CDN as desired. Note that Cloud CDN may incur [additional costs](https://docs.cloud.google.com/cdn/pricing). 7. Click **Create**. ### Configure routing rules Routing rules are the components of an external Application Load Balancer's [URL map](https://docs.cloud.google.com/load-balancing/docs/url-map-concepts). For this tutorial, you should skip this portion of the load balancer configuration, because it is automatically set to use the backend you just configured. ### Review the configuration 1. Click **Review and finalize**. 2. Review the **Frontend** , **Routing rules** , and **Backend**. 3. Click **Create**. You may need to wait a few minutes for the load balancer to be created. ## Connect your domain to your load balancer After the load balancer is created, click the name of your load balancer: `example-lb`. Note the IP address associated with the load balancer: for example, `30.90.80.100`. To point your domain to your load balancer, create an `A` record using your domain registration service. If you added multiple domains to your SSL certificate, you must add an `A` record for each one, all pointing to the load balancer's IP address. For example, to create `A` records for `www.example.com` and `example.com`: ``` NAME TYPE DATA www A 30.90.80.100 @ A 30.90.80.100 ``` See [Troubleshooting domain status](https://docs.cloud.google.com/load-balancing/docs/ssl-certificates/troubleshooting#domain-status) for more information about connecting your domain to your load balancer. ## Recommended: Monitor the SSL certificate status It might take up to 60-90 minutes for Google Cloud to provision the certificate and make the site available through the load balancer. To monitor the status of your certificate: ### Console 1. Go to the Load balancing page in the Google Cloud console. [Go to Load balancing](https://console.cloud.google.com/networking/loadbalancing) 2. Click the name of your load balancer: `example-lb`. 3. Click the name of the SSL certificate associated with the load balancer: `example-ssl`. 4. The **Status** and **Domain status** rows show the certificate status. Both must be active in order for the certificate to be valid for your website. ### Command line 1. To check the certificate status, run the following command: ``` gcloud compute ssl-certificates describe CERTIFICATE_NAME \ --global \ --format="get(name,managed.status)" ``` 2. To check the domain status, run the following command: ``` gcloud compute ssl-certificates describe CERTIFICATE_NAME \ --global \ --format="get(managed.domainStatus)" ``` See [Troubleshooting SSL certificates](https://docs.cloud.google.com/load-balancing/docs/ssl-certificates/troubleshooting#certificate-managed-status) for more information about certificate status. ## Test the website Once the SSL certificate is active, verify that content is served from the bucket by going to `https://www.example.com/test.html`, where `test.html` is an object stored in the bucket that you're using as the backend. If you set the `MainPageSuffix` property, `https://www.example.com` goes to `index.html`. ## Clean up After you finish the tutorial, you can clean up the resources that you created so that they stop using quota and incurring charges. The following sections describe how to delete or turn off these resources. ### Delete the project The easiest way to eliminate billing is to delete the project that you created for the tutorial. To delete the project: > [!CAUTION] > **Caution** : Deleting a project has the following effects: > > - **Everything in the project is deleted.** If you used an existing project for the tasks in this document, when you delete it, you also delete any other work you've done in the project. > - **Custom project IDs are lost.** When you created this project, you might have created a custom project ID that you want to use in the future. To preserve the URLs that use the project ID, such as an `appspot.com` URL, delete selected resources inside the project instead of deleting the whole project. > > > If you plan to explore multiple architectures, tutorials, or quickstarts, reusing projects > can help you avoid exceeding project quota limits. 1. In the Google Cloud console, go to the **Manage resources** page. [Go to Manage resources](https://console.cloud.google.com/iam-admin/projects) 2. In the project list, select the project that you want to delete, and then click **Delete**. 3. In the dialog, type the project ID, and then click **Shut down** to delete the project.

### Delete the load balancer and bucket If you don't want to delete the entire project, delete the load balancer and bucket that you created for the tutorial: 1. Go to the Load balancing page in the Google Cloud console. [Go to Load balancing](https://console.cloud.google.com/networking/loadbalancing) 2. Select the checkbox next to `example-lb`. 3. Click **Delete**. 4. (Optional) Select the checkbox next to the resources you want to delete along with the load balancer, such as the `my-static-assets` bucket or the `example-ssl` SSL certificate. 5. Click **Delete load balancer** or **Delete load balancer and the selected resources**. > [!NOTE] > **Note:** If you only want to delete the bucket you created, follow the instructions at [Deleting buckets](https://docs.cloud.google.com/storage/docs/deleting-buckets). ### Release a reserved IP address To delete the reserved IP address you used for the tutorial: 1. In the Google Cloud console, go to the **External IP addresses** page. [Go to External IP addresses](https://console.cloud.google.com/addresses/list) 2. Select the checkboxes next to `example-ip`. 3. Click **Release static address**. 4. In the confirmation window, click **Delete**. ## What's next - See [examples and tips for using buckets to host a static website](https://docs.cloud.google.com/storage/docs/static-website). - Read about [troubleshooting for hosting a static website](https://docs.cloud.google.com/storage/docs/troubleshooting#static-website). - Learn about [hosting static assets for a dynamic website](https://docs.cloud.google.com/storage/docs/static-website#tip-dynamic). - Learn about [other Google Cloud web serving solutions](https://docs.cloud.google.com/solutions/web-serving-overview).