Google Cloud Storage bucket names must be lowercase, can include dashes and dots, but cannot have underscores or uppercase letters. They must also follow DNS naming rules.
When versioning is enabled, uploading an object with the same name creates a new version. The old version remains accessible.
Choosing a bucket in a European region ensures data stays within EU boundaries, meeting residency requirements.
Granting the 'Storage Object Viewer' role on the bucket gives read access only, following least privilege. Public access or admin roles are too broad.
Objects should be archived first at 180 days, then deleted after 365 days. The rules must reflect this order.
