1. Cloud Storage #
Object storage.
Classes and locations #
| Location | Usage |
|---|---|
| Regional | Data close to compute |
| Dual-region | High availability across two regions |
| Multi-region | Content served across a continent |
gcloud storage buckets create gs://exports-equipe-123 --location=europe-west9 --uniform-bucket-level-access --public-access-prevention
gcloud storage buckets update gs://exports-equipe-123 --versioning
gcloud storage cp rapport.csv gs://exports-equipe-123/2026/
gcloud storage buckets update gs://exports-equipe-123 --lifecycle-file=cycle.json
gcloud storage sign-url gs://exports-equipe-123/2026/rapport.csv --duration=15m --private-key-file=cle.json2. Bucket security #
Protecting data.
Rules #
- Uniform bucket-level access (IAM only) and public access prevention.
- Encryption by default, CMEK keys in Cloud KMS if needed.
- Versioning, retention policies and bucket lock for compliance.
- Signed URLs for temporary access without a Google account.
3. Disks and files #
Block and NFS.
Services #
| Service | Usage |
|---|---|
| Persistent Disk (standard, balanced, SSD) | VM disks, zonal or regional |
| Hyperdisk | Independently adjustable performance |
| Filestore | Shared managed NFS |
| Storage Transfer Service | Migrating from another cloud or a site |
Good practice: fake-gcs-server emulates the Cloud Storage API locally for testing; it is used in the hands-on labs.
