Search code examples
google-cloud-storage

Google Storage access based on IP Address

Is there a way to give access to a Google Cloud Storage bucket based on the IP address it is coming from.

On Amazon s3, you can just set this in the access policy like this:

"Condition" :  {
       "IpAddress" : {
          "aws:SourceIp" : ["192.168.176.0/24","192.168.143.0/24"]
      }
}

I do not want to use a signed url.

Solution

  • UPDATE: This is now possible using VPC Service Controls

    No, this is not currently possible.

    There's currently a Feature request to restrict google cloud storage bucket by IP Address.