What problem does it solve? Creating a Google Cloud Storage bucket involves many architectural decisions—storage class, location, encryption, retention, lifecycle rules—and a wrong default can cause security gaps or unnecessary costs. This Skill analyzes your workload, validates project-level security settings, and produces a secure-by-default, cost-effective bucket configuration before anything is created. ## Core Features & Use Cases - Use-Case Driven Design: Maps workloads (sensitive data, media hosting, UGC ingestion, static websites, archiving, backup/DR, log storage, AI/ML) to tailored configuration plans with required and recommended settings. - Three-Phase Workflow: Runs project preflight security checks, drafts a configuration plan with bucket name availability verification, then generates output as gcloud commands, REST API calls, Terraform, or SDK code (C++, Go, Java, Python). - Safety Guardrails: Enforces secure defaults (UBLA, public access prevention, soft delete, CSEK restriction), warns about irreversible operations like Bucket Lock, and never executes mutating commands without explicit user confirmation. - Use Case: A user asks to create a bucket for HIPAA-regulated medical records. The Skill checks project policies, proposes a plan with CMEK encryption, retention policy, and IP filtering, confirms the bucket name is available, and outputs the exact gcloud command after approval. ## Quick Start Ask the assistant to create a Google Cloud Storage bucket for your workload, for example: create a GCS bucket for storing database backups with disaster recovery protection.
