Associate Cloud Engineer

Cloud Storage Data Access audit logs record read (and write) operations performed on objects and buckets, including who performed them, whereas Admin Activity audit logs only record configuration and metadata changes and do not track data access events. Because Data Access audit logs (other than BigQuery) are disabled by default due to their volume, they must be explicitly enabled for the buckets that need to be audited. Once enabled, the resulting log entries can be viewed and filtered in the Logs Explorer (log viewer) by filtering on the Cloud Storage resource type, giving the auditor the ability to see who accessed the data in those buckets.