How to use rate limit to defense GCS

[cleonchen]

I want to restrict GCS access, restrict specific IP and HTTP referer, etc. I don’t know if there is any specific method.

[christianpaula]

Use public access prevention

public access prevention bucket setting and the related public access prevention organization policy constraint. Using either the setting or constraint restricts the entities, such as anonymous users over the internet, that can be granted access to your data. For an overview of access control options

However, for the restrictive specific IP and HTTP is currently an ongoing Feature Request there is no specific ETA for this. You can track the updates in this link Feature request: Restrict Google Cloud Storage bucket by IP address.