Buckets: update

Updates the metadata of a bucket. Changes to the bucket are readable immediately after writing, but configuration changes may take time to propagate.

Required permissions

To use this method,the authenticated user must have the storage.buckets.update IAM permission. Additionally, to perform specific actions on a bucket, the authenticated user must have the following permissions:

  • To update public access prevention policies or access control lists (ACLs): storage.buckets.setIamPolicy
  • To return ACLs on a bucket: storage.buckets.getIamPolicy
  • To update bucket IP filtering rules: storage.buckets.setIpFilter
  • To return bucket IP filtering rules as part of the response: storage.buckets.getIpFilter

Request

HTTP request

PUT https://storage.googleapis.com/storage/v1/b/bucket

In addition to standard query parameters, the following query parameters apply to this method.

To see an example of how to include query parameters in a request, see the JSON API Overview page.

Parameters

Parameter nameValueDescription
Path parameters
bucketstringName of a bucket.
Optional query parameters
ifMetagenerationMatchlongMakes the return of the bucket metadata conditional on whether the bucket's current metageneration matches the given value.
ifMetagenerationNotMatchlongMakes the return of the bucket metadata conditional on whether the bucket's current metageneration does not match the given value.
predefinedAclstringApply a predefined set of access controls to this bucket.

Acceptable values are:
  • authenticatedRead: Project team owners get OWNER access, and allAuthenticatedUsers get READER access.
  • private: Project team owners get OWNER access.
  • projectPrivate: Project team members get access according to their roles.
  • publicRead: Project team owners get OWNER access, and allUsers get READER access.
  • publicReadWrite: Project team owners get OWNER access, and allUsers get WRITER access.
If iamConfiguration.uniformBucketLevelAccess.enabled is set to true, requests that include this parameter fail with a 400 Bad Request response.
predefinedDefaultObjectAclstringApply a predefined set of default object access controls to this bucket.

Acceptable values are:
  • authenticatedRead: Object owner gets OWNER access, and allAuthenticatedUsers get READER access.
  • bucketOwnerFullControl: Object owner gets OWNER access, and project team owners get OWNER access.
  • bucketOwnerRead: Object owner gets OWNER access, and project team owners get READER access.
  • private: Object owner gets OWNER access.
  • projectPrivate: Object owner gets OWNER access, and project team members get access according to their roles.
  • publicRead: Object owner gets OWNER access, and allUsers get READER access.
If iamConfiguration.uniformBucketLevelAccess.enabled is set to true, requests that include this parameter fail with a 400 Bad Request response.
projectionstringSet of properties to return. Defaults to full.

Acceptable values are:
  • full: Include all properties.
  • noAcl: Omit owner, acl, and defaultObjectAcl properties.

Request body

In the request body, supply a bucket resource with the following properties:

Property nameValueDescriptionNotes
Required Properties
acl[]list

Access controls on the bucket. If empty, this parameter is ignored. Can contain one or more bucketAccessControls Resources.

writable
Optional Properties
autoclassobjectThe bucket's Autoclass configuration, which, when enabled, controls the storage class of objects based on how and when the objects are accessed. For more information, see Autoclass.writable
billingobjectThe bucket's billing configuration, used to control the Requester Pays feature.writable
cors[]listThe bucket's CORS configuration. For more information, see Cross-Origin Resource Sharing.writable
defaultEventBasedHoldbooleanWhether or not to automatically apply an eventBasedHold to new objects added to the bucket.writable
defaultObjectAcl[]listDefault access controls to apply to new objects when no ACL is provided. This list defines an entity and role for one or more defaultObjectAccessControls Resources. If iamConfiguration.uniformBucketLevelAccess.enabled is set to true, this field is omitted in responses, and requests that specify this field fail with a 400 Bad Request response.writable
encryptionobjectThe bucket's encryption configuration.writable
iamConfigurationobjectThe bucket's IAM configuration.writable
ipFilter (preview)objectThe bucket IP filtering configuration . For more information about bucket IP filtering, see Bucket IP filtering.writable
labelsobjectUser-provided bucket labels, in key/value pairs.writable
labels.(key)stringAn individual label entry.writable
lifecycleobjectThe bucket's lifecycle configuration. See lifecycle management for more information.writable
loggingobjectThe bucket's logging configuration. For more information, see usage logs and storage logs.writable
retentionPolicyobjectThe bucket's retention policy configuration. For more information, see Bucket Lock.writable
rpostringThe recovery point objective for cross-region replication of the bucket. Applicable only for dual- and multi-region buckets. "DEFAULT" uses default replication. "ASYNC_TURBO" enables turbo replication, valid for dual-region buckets only. For more information, see redundancy across regions.writable
softDeletePolicyobjectThe bucket's soft delete policy configuration. For more information, see Soft Delete.writeable
storageClassstringThe bucket's default storage class, used whenever no storageClass is specified for a newly-created object. For available storage classes, see Storage classes.writable
versioningobjectThe bucket's versioning configuration. For more information, see Object Versioning.writable
websiteobjectThe bucket's website configuration, controlling how the service behaves when accessing bucket contents as a web site. See the Static Website Examples for more information.writable

Response

If successful, this method returns a bucket resource in the response body.

For information about status and error codes returned by this API, see the reference page.

Try it!

Use the APIs Explorer below to call this method on live data and see the response.