Cloud CDN Backend Buckets Should Enable Negative Caching
More Info:
Ensure Cloud CDN backend buckets enable negative caching for better performance.Risk Level
MediumAddress
Operational Maturity, Reliability, SecurityCompliance Standards
CBPTriage and Remediation
Remediation
Using Console
Using Console
To remediate the misconfiguration “Cloud CDN Backend Buckets Should Enable Negative Caching” for GCP using GCP Console, you can follow these step-by-step instructions:
- Open the Google Cloud Console and go to the Cloud Storage Browser page.
- Select the bucket that you want to configure for negative caching.
- Click on the “Edit bucket permissions” button.
- In the “Add members” field, enter “allUsers” and select the “Storage Object Viewer” role.
- Click on the “Add” button to save the changes.
- Go to the Cloud CDN page in the GCP Console.
- Select the CDN resource that is associated with the backend bucket.
- Click on the “Edit” button.
- In the “Backend configuration” section, click on the “Advanced” tab.
- Check the “Enable negative caching” checkbox.
- Set the “Negative caching TTL” value to the desired time in seconds.
- Click on the “Save” button to save the changes.
- Verify that the negative caching is enabled by sending a request to the CDN resource and checking the response headers.
Using CLI
Using CLI
To remediate the misconfiguration “Cloud CDN Backend Buckets Should Enable Negative Caching” in GCP, follow these steps:Where “lifecycle.json” is a JSON file that contains the lifecycle rule definition, and “[BUCKET_NAME]” is the name of the bucket being used as a backend bucket for Cloud CDN. Here’s an example JSON file:This JSON file sets the storage class to “Regional” for objects that match the condition “age is greater than 0” and “matchesStorageClass is REGIONAL”. The “description” field is optional and can be used to provide additional information about the rule.
- Open the Google Cloud Console and navigate to the Cloud Storage page.
- Select the bucket that is being used as a backend bucket for Cloud CDN.
- Click on the “Edit Bucket” button.
- Under the “Lifecycle” tab, click on the “Add Rule” button.
- In the “Add Lifecycle Rule” dialog box, set the following parameters:
- Rule Name: Enable Negative Caching
- Action: Set storage class to “Regional”
- Frequency: Choose an appropriate frequency for your use case
- Conditions: Add a condition that matches the objects that should be cached with negative caching. For example, you can use the “Age” condition and set it to “is greater than” with a value of “0”.
- Click on the “Save” button to add the lifecycle rule to the bucket.
- Verify that the lifecycle rule was added by checking the “Lifecycle” tab of the bucket.
Using Python
Using Python
None