gCP: Resource.name.startsWith

• https://cloud.google.com/iam/docs/configuring-resource-based-access

uniform bucket-level access required

resource.type != 'compute.googleapis.com/Instance' ||
  resource.name.extract('/instances/{name}').startsWith('dev-')

resource.type == "storage.googleapis.com/Bucket" &&
   resource.name.startsWith("projects/_/buckets/exampleco-site-assets-")
Ref: https://cloud.google.com/iam/docs/conditions-overview

Related

• IAM Conditions
• storage.objects.list

See also

• gcloud projects [ set-iam-policy | get-iam-policy | add-iam-policy-binding ], resource.name.startsWith