Control: GCP > Network > Backend Bucket > CDN
Determine the action to take when a GCP Network backend bucket's Cloud CDN state or configuration does not match the expected posture.
Cloud CDN caches backend bucket content at Google's edge and serves it to the internet, turning the bucket into a publicly cached distribution point — part of the same exposure posture story as load balancer frontends.
When the policy is set to an Enabled per CDN > * value, the CDN configuration sub-policies define the expected settings. Only the settings valid for the expected Cache Mode are compared: all TTLs apply to CACHE_ALL_STATIC, only Default TTL applies to FORCE_CACHE_ALL, and no TTLs apply to USE_ORIGIN_HEADERS.
If the current Cloud CDN state or configuration does not match the expectation and this policy is set to an Enforce value, the backend bucket will be updated in place to the expected state and settings.
Resource Types
This control targets the following resource types:
Policies
The following policies can be used to configure this control:
This control type relies on these other policies when running actions:
- GCP > Network > Backend Bucket > CDN > Cache Mode
- GCP > Network > Backend Bucket > CDN > Client TTL
- GCP > Network > Backend Bucket > CDN > Default TTL
- GCP > Network > Backend Bucket > CDN > Max TTL
- GCP > Network > Backend Bucket > CDN > Negative Caching
- GCP > Network > Backend Bucket > CDN > Request Coalescing
- GCP > Network > Backend Bucket > CDN > Serve While Stale
Permissions
Cloud permissions used by this control and its actions:
compute.backendBuckets.update
Category
In Your Workspace
Developers
- tmod:@turbot/gcp-network#/control/types/backendBucketCdn
- tmod:@turbot/turbot#/control/categories/security
- turbot graphql controls --filter "controlTypeId:tmod:@turbot/gcp-network#/control/types/backendBucketCdn"
Get Controls