[20241010] retention policyでGCSの削除・編集をロックする

[linzhengen]

Doc

https://cloud.google.com/storage/docs/using-bucket-lock?hl=ja#lock-bucket

cli

gcloud storage buckets update gs://BUCKET_NAME --lock-retention-period

tf

resource "google_storage_bucket" "my_locked_bucket" {
  name          = "my-gcs-locked-bucket"
  location      = "US"

  retention_policy {
    is_locked = true
    retention_period = 7776000 # 90日間で削除上書きできないようにする
  }

  lifecycle_rule {
    condition {
      age = 90
    }
    action {
      type = "Delete"
    }
  }
}