We now have Cloud Audit Logs turned on for our storage buckets. To see these logs, go to https://console.cloud.google.com/logs/viewer and select "GCS Bucket" from the resource dropdown. You can also further drill down to a specific bucket.
For more details on why we picked this approach and not access logs, or for links to docs on exporting these logs to another bucket (for analysis outside of GCloud), see https://www.notion.so/darklang/Cloud-Storage-Logs-5a686f3d235f47f395f68a75a1e2c794 .
Tags for search: audit log auditlog security storage bucket backups