Enable Usage and Storage Logs

01 Run projects list command (Windows/macOS/Linux) with custom output filters to list the ID of each project available in your Google Cloud Platform (GCP) account:

gcloud projects list
	--format="value(projectId)"

02 The command output should return the requested GCP project identifiers (IDs):

cc-project5-123123
cc-ai-project-123123

03 Run storage buckets list command (Windows/macOS/Linux) with custom output filters to describe the identifier (name) of each storage bucket created for the specified GCP project:

gcloud storage buckets list
	--project cc-project5-123123
	--format="value(name)"

04 The command output should return the requested bucket names:

cc-webdata-bucket
cc-dataproc-bucket
cc-cloud-ai-bucket

05 Run storage buckets describe command (Windows/macOS/Linux) with the name of the Cloud Storage bucket that you want to examine as the identifier parameter and custom output filters to describe the usage and storage logging configuration available for the selected bucket:

gcloud storage buckets describe gs://cc-webdata-bucket
	--format="json(logging_config)"

06 The command output should return the requested configuration information:

null

07 Repeat steps no. 5 and 6 for each storage bucket created for the selected GCP project.

08 Repeat steps no. 3 – 7 for each GCP project available within your Google Cloud account.

01 Run storage buckets create command (Windows/macOS/Linux) to create the storage bucket required to store the log files:

gcloud storage buckets create gs://cc-usage-logs

02 The command output should return the URL of the new bucket:

Creating gs://cc-usage-logs/...

03 Run storage buckets update command (Windows/macOS/Linux) with the name of the Cloud Storage bucket that you want to configure as the identifier parameter, to enable usage and storage logs for the selected storage bucket. Use the --log-bucket parameter to specify the bucket that will receive the log files, created at the previous step. This bucket must exist within the same organization as the bucket being logged. (Optional) Use the --log-object-prefix parameter to specify a prefix for the names of logs generated in the log bucket:

gcloud storage buckets update gs://cc-webdata-bucket
	--log-bucket=cc-usage-logs
	--log-object-prefix=project5-bucket-logs

04 The command output should return the bucket update status:

Updating gs://cc-webdata-bucket/...
Completed 1

05 In addition to enabling logging for your storage bucket, you also need to grant Cloud Storage the roles/storage.objectCreator role. This role gives Cloud Storage, in the form of the group <cloud-storage-analytics@google.com>, permission to create and store your log files as new objects:

gcloud storage buckets add-iam-policy-binding gs://cc-webdata-bucket
	--member=group:cloud-storage-analytics@google.com
	--role=roles/storage.objectCreator

06 The command output should return the modified policy:

bindings:
- members:
	- projectEditor:cc-project5-123123
	- projectOwner:cc-project5-123123
	role: roles/storage.legacyObjectOwner
- members:
	- projectViewer:cc-project5-123123
	role: roles/storage.legacyObjectReader
- members:
	- group:cloud-storage-analytics@google.com
	role: roles/storage.objectCreator
etag: ABCD
kind: storage#policy
resourceId: projects/_/buckets/cc-webdata-bucket
version: 1

07 Repeat steps no. 3 - 6 for each storage bucket that you want to configure, available in the selected GCP project.

08 Repeat steps no. 1 – 7 for each GCP project created within your Google Cloud account.