Cloud Trace enforces organization policies for observability buckets
The create-observability bucket flow now enforces organization policies for resource locations, Customer-Managed Encryption Keys (CMEKs), and key storage projects. This change enhances security and compliance for trace data stored in observability buckets. The feature is available now for organizations using Cloud Trace with applicable policies.
Features (1) ›
- Cloud Trace
The create-observability bucket flow enforces organization policies with constraints on resource locations. This flow also enforces policies that require customer-managed encryption keys (CMEKs) and that restrict the projects that store those keys. Your trace data is stored in an observability bucket. For more information, see the following: Set defaults for observability buckets Support for CMEKs
https://docs.cloud.google.com/release-notes#June_02_2026
Related releases
- Google Cloud AI Infrastructure and Orchestration Updates - July 2026 Google Cloud Blog ·
- Confidential VMs Expand vCPU Support on C3D/C4D Google Cloud release notes ·
- Google Kubernetes Engine: New versions and deprecations Google Cloud release notes ·
- Datastream adds preview support for Workday replication Google Cloud release notes ·
- Google Cloud CISO Perspectives: AI Threat Defense for Boards Google Cloud Blog ·
- Data Studio Conversational Analytics GA, adds BigQuery integration Google Cloud release notes ·