A Public Website Bucket That Does Not Publish Its File List

A Cloud Storage bucket serving a static website. Google's own guide notes that objectViewer lets anyone list the bucket, so this module grants legacyObjectReader: read a named file, list nothing. It says plainly that Cloud Storage does not serve your domain over HTTPS, requires you to accept that everything in it is public, and keeps trimmed previous versions as the rollback.

This is the operations reference: version drift, dependants and neighbours. For what the module provisions, its inputs and outputs, and how to buy it, see the catalogue entry.

terraformGoogle CloudServerless & Containersv1.0.0static-validated

Provider drift

This artifact declares no Terraform provider requirements, so there is nothing to drift. Provider freshness applies to Terraform and OpenTofu modules.

What depends on this

No reference architecture names this module, so changing it affects only configurations that reference it directly.

Nearest alternatives

Same cloud, same category. These are what you would weigh against it without changing provider.

Cloud Run Function (gen2)Cloud Run Job (v2)Cloud Run Service The App Engine Application: One per Project, Forever

The same job on other clouds

Static Site Hosting on other providers. Useful when the cloud is still open, or when you are pricing a second one. How far a comparison like that can be trusted is covered in comparing clouds.

A Pages Project Whose Previews Are Not Public by AccidentCloudflare A Static Site That Tells You the File List Is Public TooTencent Cloud A Static Site Where Encrypting the Bucket Would Break ItHuawei Cloud A Static Site Whose Bucket Is Readable and Whose File List Is NotAlibaba Cloud A Static Site Whose Policy Version Is Not the One Every S3 Example UsesScaleway A Website Bucket Readable by Name and Not by ListingIBM Cloud An Amplify App Whose Previews Are Behind Basic Auth and Whose Branches Do Not MultiplyAWS Azure Static Web AppAzure

Installing it

module "gcp_static_site" {
  source  = "www.iac-bazaar.com/iac-bazaar/gcp-static-site/gcp"
  version = "1.0.0"
}

A registry token is required for the download itself. Installing through the registry protocol has the two credential steps.