update

{              
  "metadata": {                // [required]
    "id": string,              // [identifier]
                               // Identifier for the resource, unique for its resource type.
    "labels": {                // [map]
                               // Labels associated with the resource.
      string: string                  
    },
    "name": string,            // Human readable name for the resource.
    "parent_id": string,       // [required]
                               // Identifier of the parent resource to which the resource belongs.
    "resource_version": int64  // Version of the resource for safe concurrent modifications and consistent reads.
                               // Positive and monotonically increases on each resource spec change (but *not* on each change of the
                               // resource's container(s) or status).
                               // Service allows zero value or current.
  },
  "spec": {                        // [required]
    "bucket_policy": { // Bucket policy specifies granular permissions for a bucket.
      "rules": [{           // Rule specifies which role must be given to a subject to access a set of objects with given
                            // prefixes or a whole bucket.
        "anonymous": { // [meaningful_empty_value]
                       // Cannot be set together with: group_id
                       // Enable anonymous access. Only read-only roles are allowed in anonymous mode.
        },
        "group_id": string, // Cannot be set together with: anonymous
                            // Group ID to grant access to.
        "paths": [string],  // A list of paths each of which is either a full object key or a prefix ending with a
                            // single "*" wildcard character. A rule is only applied to objects matching any of paths.
                            // If there is a path equal to "*", a rule applies to a whole bucket.
        "roles": [string]   // A set of roles which a subject will have. All `storage.*` roles are supported.
      }]
    },
    "cors": {     // Cross-origin resource sharing configuration.
      "rules": [{                    // CORS rules.
        "allowed_headers": [string], // Headers that are allowed in a preflight request through the Access-Control-Request-Headers header.
        "allowed_methods": [string], // [required]
                                     // HTTP methods CORS is allowed for: GET, PUT, POST, DELETE, HEAD.
        "allowed_origins": [string], // [required]
                                     // The origins that you want to allow cross-domain requests from. Single wildcard * is allowed.
        "expose_headers": [string],  // Headers in the response that you want customers to be able to access from their applications.
        "id": string,                // [optional]
                                     // Optional rule identifier.
        "max_age_seconds": int32     // [optional]
                                     // Time in seconds that your browser can cache the response for a preflight request as identified by the resource.
      }]
    },
    "default_storage_class": enum( // Storage class to use by default for uploads to the bucket. It may be overridden by `x-amz-storage-class` header.
                                   // If not set - STANDARD is used as a default storage class.
      "STORAGE_CLASS_UNSPECIFIED",
      "STANDARD",                 
      "ENHANCED_THROUGHPUT",      
      "INTELLIGENT"               
    ),
    "force_storage_class": bool,   // Flag to force usage of default_storage_class, ignoring `x-amz-storage-class` header.
    "lifecycle_configuration": {
      "last_access_filter": { // Specifies which requests are included in `days_since_last_access` calculations for all transition rules.
        "conditions": [{           // A request is included in `days_since_last_access` calculations if:
                                   // - The first condition matching the request has `INCLUDE` type.
                                   // OR
                                   // - The request doesn't match any conditions.
          "methods": enum(        // The s3 methods to match.
                                  // An empty list matches all methods.
            "METHOD_UNSPECIFIED",
            "GET_OBJECT",        
            "HEAD_OBJECT",       
            "GET_OBJECT_TAGGING",
            "COPY_OBJECT",        // Copy object method reads the source object.
                                  // We account for those operations as source object accesses when calculating `days_since_last_access` for source object.
            "UPLOAD_PART_COPY"    // Upload part copy method reads the source object.
                                  // We account for those operations as source object accesses when calculating `days_since_last_access` for source object.
          ),
          "type": enum(         // [required]
            "TYPE_UNSPECIFIED",
            "INCLUDE",          // If an include type condition is the first condition that the request match, the request will be included in
                                // `days_since_last_access` calculation.
            "EXCLUDE"           // If an exclude type condition is the first condition that the request match, the request will be ignored in `days_since_last_access`
                                // calculation.
          ),
          "user_agents": [string]  // User agents to match. Condition is satisfied if the request's user agent contains any of these substrings.
                                   // An empty list matches all user agents.
        }]
      },
      "rules": [{                             
        "abort_incomplete_multipart_upload": { // Specifies the days since the initiation of an incomplete multipart upload that
                                               // the system will wait before permanently removing all parts of the upload.
          "days_after_initiation": int32       // Specifies the days since the initiation of an incomplete multipart upload that
                                               // the system will wait before permanently removing all parts of the upload.
        },
        "expiration": {                         // Specifies the expiration for the lifecycle of the object in the form of date, days and,
                                                // whether the object has a delete marker.
          "date": "1970-01-31T02:30:59Z",       // [google.protobuf.Timestamp]
                                                // Cannot be set together with: days
                                                // Indicates at what date the object will be deleted. The time is always midnight UTC.
          "days": int32,                        // Cannot be set together with: date
                                                // Indicates the lifetime, in days, of the objects that are subject to the rule.
                                                // The value must be a non-zero positive integer.
          "expired_object_delete_marker": bool  // Indicates whether the system will remove a "delete marker" with no noncurrent versions.
                                                // If set to true, the "delete marker" will be permanently removed.
                                                // If set to false the policy takes no action.
                                                // This cannot be specified with Days or Date in a LifecycleExpiration Policy.
        },
        "filter": {                                // [non_empty_default]
                                                   // The Filter is used to identify objects that a Lifecycle Rule applies to.
                                                   // The Lifecycle Rule will apply to any object matching all of the predicates
                                                   // configured inside (using logical AND).
          "object_size_greater_than_bytes": int64, // Minimum object size to which the rule applies.
          "object_size_less_than_bytes": int64,    // Maximum object size to which the rule applies.
          "prefix": string                         // Prefix identifying one or more objects to which the rule applies.
                                                   // If prefix is empty, the rule applies to all objects in the bucket.
        },
        "id": string,                          // [required]
                                               // Unique identifier for the rule per configuration.
                                               // The value cannot be longer than 255 characters.
        "noncurrent_version_expiration": {    // Specifies when noncurrent object versions expire.
                                              // It works only on a bucket that has versioning enabled (or suspended).
          "newer_noncurrent_versions": int32, // [optional]
                                              // Specifies how many noncurrent versions the system will retain.
          "noncurrent_days": int32            // Specifies the number of days an object is noncurrent before the system will expire it.
        },
        "noncurrent_version_transition": {    // Specifies the transition for the lifecycle of a noncurrent object.
                                              // It works only on a bucket that has versioning enabled (or suspended).
          "newer_noncurrent_versions": int32, // [optional]
                                              // Specifies how many noncurrent versions the system will retain without transition.
          "noncurrent_days": int32,           // Specifies the number of days an object is noncurrent before the system will transit it.
          "storage_class": enum(         // Target storage class to transit to.
            "STORAGE_CLASS_UNSPECIFIED",
            "STANDARD",                 
            "ENHANCED_THROUGHPUT",      
            "INTELLIGENT"               
          )
        },
        "status": enum(         // [required]
          "STATUS_UNSPECIFIED",
          "ENABLED",           
          "DISABLED"           
        ),
        "transition": {                    // Specifies the transition for the lifecycle of an object in the form of date or days and
                                           // target storage class to transit object to.
          "date": "1970-01-31T02:30:59Z",  // [google.protobuf.Timestamp]
                                           // Cannot be set together with: days, days_since_last_access
                                           // Indicates at what date the object will be transited. The time is always midnight UTC.
          "days": int32,                   // Cannot be set together with: date, days_since_last_access
                                           // Amount of days since object was uploaded before it's transited to a new storage class.
                                           // The value must be a non-zero positive integer.
          "days_since_last_access": int32, // Cannot be set together with: date, days
                                           // The number of days since the object was last accessed before it is transitioned.
          "storage_class": enum(         // Target storage class to transit to.
            "STORAGE_CLASS_UNSPECIFIED",
            "STANDARD",                 
            "ENHANCED_THROUGHPUT",      
            "INTELLIGENT"               
          )
        }
      }]
    },
    "max_size_bytes": int64,       // Maximum bucket size.
                                   // Zero means unlimited.
                                   // Actual limit can be lower if customer doesn't have enough quota.
                                   // Real bucket size can go a little higher if customer writes too fast.
    "object_audit_logging": enum(         // Object audit logging specifies which requests must be logged - none, all or mutational only.
      "OBJECT_AUDIT_LOGGING_UNSPECIFIED",
      "NONE",                             // Logging is disabled.
      "MUTATE_ONLY",                      // Logging enabled only for mutating requests.
      "ALL"                               // Logging enabled for all requests.
    ),
    "versioning_policy": enum(         // [non_empty_default]
                                       // Supports transitions:
                                       //  * disabled -> enabled
                                       //  * disabled -> suspended
                                       //  * enabled <-> suspended.
      "VERSIONING_POLICY_UNSPECIFIED",
      "DISABLED",                     
      "ENABLED",                      
      "SUSPENDED"                     
    )
  }
}