Google Cloud Platform Storage Buckets can be directly exposed via HTTP. The recommended configuration for this is to have
allUsers with the
Storage Object Viewer role.
The Storage Object Viewer role has got storage.bucket.list permission. I tried creating a custom role based on this role and removed the storage.bucket.list permission.
I updated the IAM permissions by getting permissions with gcutil, editing, then I tried to update.
When I tried updating I used the following command
gsutil iam set permissions.txt gs://example.com/
But I got the following error
BadRequestException: 400 Role roles/CustomStorageObjectViewer is not supported for this resource.
Is there any way to configure a public gcp storage bucket without the storage.bucket.list permission?