Define index page suffix and error page for the bucket website configuration

Sign in to Google Cloud Management Console.

Select the Google Cloud Platform (GCP) project that you want to examine from the console top navigation bar.

Navigate to Cloud Storage console available at https://console.cloud.google.com/storage.

In the main navigation panel, select Buckets to access the list with all the Cloud Storage buckets created for the selected GCP project.

Choose the storage bucket that you want to examine and select the Permissions tab. Check whether the allUsers or allAuthenticatedUsers principal is granted the Storage Object Viewer role (or another role/permission that includes storage.objects.get). If neither principal is granted this access, the selected bucket is not publicly accessible, the index page suffix and error page check does not apply to it, and you should skip to the next bucket.

If the bucket is publicly accessible, click Edit bucket at the top of the bucket details page, and expand the Website Config section.

In the Website Config section, check the Index (main) page suffix and Error (404 not found) page fields to determine if the bucket website configuration specifies the index page suffix and error page for the hosted website. If both Index (main) page suffix and Error (404 not found) page fields are empty, the index page suffix and error page are not defined in the static website configuration set for the selected Google Cloud Storage bucket.

Repeat steps no. 5 – 7 for each storage bucket that you want to examine, created for the selected GCP project.

Repeat steps no. 2 – 8 for each project deployed in your Google Cloud Platform (GCP) account.

Run projects list command (Windows/macOS/Linux) with custom query filters to list the ID of each Google Cloud Platform (GCP) project available in your cloud account:

gcloud projects list --format="table(projectId)"

The command output should return the requested GCP project ID(s):

PROJECT_ID
cc-web-project-112233
cc-data-project-111222

Run gsutil ls command (using gsutil Python tool) to list the identifier of each Cloud Storage bucket created for the specified GCP project:

gsutil ls -p cc-web-project-112233

The command output should return the requested storage resource name(s):

gs://trendmicro.com/
gs://cc-logs-bucket/

Run gsutil iam get command (using gsutil tool) using the name of the Cloud Storage bucket that you want to examine as the identifier parameter, to retrieve the IAM policy bindings for the selected bucket and confirm whether it grants public read access:

gsutil iam get gs://trendmicro.com

The command output should return the requested IAM policy information:

{
  "bindings": [
    {
      "members": [
        "projectEditor:my-project",
        "projectOwner:my-project"
      ],
      "role": "roles/storage.legacyBucketOwner"
    },
    {
      "members": [
        "projectViewer:my-project"
      ],
      "role": "roles/storage.legacyBucketReader"
    },
    {
      "members": [
        "allUsers"
      ],
      "role": "roles/storage.objectViewer"
    }
  ],
  "etag": "CAI="
}

If the bindings array does not include a role binding that grants the roles/storage.objectViewer role (or another role/permission that includes storage.objects.get) to the allUsers or allAuthenticatedUsers member, the selected bucket is not publicly accessible, the index page suffix and error page check does not apply to it, and you should skip to the next bucket.

Run gsutil web get command (using gsutil tool) using the name of the Cloud Storage bucket that you want to examine as the identifier parameter, to describe the static website configuration available for the selected bucket:

gsutil web get gs://trendmicro.com

The command output should return the requested configuration information:

gs://trendmicro.com/ has no website configuration.

If the gsutil web get command output returns "[storage-bucket] has no website configuration.", where [storage-bucket] is the name of the verified bucket, or the command output does not return values for both "notFoundPage" and "mainPageSuffix" configuration attributes, the index page suffix and error page are not defined in the static website configuration for the selected Google Cloud Storage bucket.

Repeat steps no. 5 – 8 for each storage bucket that you want to examine, available in the selected GCP project.

Repeat step no. 1 – 9 for each GCP project created within your Google Cloud Platform (GCP) account.

Sign in to Google Cloud Management Console.

Select the Google Cloud Platform (GCP) project that you want to examine from the console top navigation bar.

Navigate to Cloud Storage console available at https://console.cloud.google.com/storage.

In the main navigation panel, select Buckets to access the list with all the Cloud Storage buckets provisioned for the selected GCP project.

Choose the storage bucket that you want to reconfigure and click Edit bucket at the top of the bucket details page.

Expand the Website Config section, provide a suffix to append to the URL when visitors request your website top-level domain or URLs without associated objects in the Index (main) page suffix field, and specify a 404 Not Found page to serve when visitors request a URL that directs to no object or the index page in the Error (404 not found) page field. Choose Continue.

Choose Continue through the remaining configuration steps (Choose how to store your data, Choose how to control access to objects) without changing any existing settings, then choose Save Changes to apply the website configuration.

Repeat steps no. 5 – 7 for each storage bucket that you want to reconfigure, created for the selected GCP project.

Repeat steps no. 2 – 8 for each project deployed in your Google Cloud Platform (GCP) account.

Run gsutil web set command (using gsutil Python tool) using the name of the Google Cloud Storage bucket that you want to reconfigure as the identifier parameter, to define the index (main) page suffix and error (404 not found) page for the static website configuration set for the selected bucket:

gsutil web set -m "index.html" -e "404.html" gs://trendmicro.com

If successful, the command output should return the gsutil web set request status:

Setting website configuration on gs://trendmicro.com/...

Run gsutil web get command (using gsutil tool) using the name of the reconfigured bucket as the identifier parameter, to describe the current static website configuration available for the selected bucket:

gsutil web get gs://trendmicro.com

The command output should return the requested configuration information. If the website configuration has been successfully applied, both "notFoundPage" and "mainPageSuffix" attributes should return values:

{
    "mainPageSuffix": "index.html",
    "notFoundPage": "404.html"
}

Repeat steps no. 1 – 4 for each storage bucket that you want to reconfigure, available in the selected GCP project.

Repeat steps no. 1 – 5 for each project created within your Google Cloud Platform (GCP) account.