This page explains the different request endpoints (URIs) used to access Google Cloud Storage through the XML API. The endpoint you use depends on the operation you perform and the type of request you make.
URIs for standard requests
For most requests, use either of the following URLs to access buckets and
[VALUES_IN_BRACKETS] with the appropriate values:
Both endpoints support secure sockets layer (SSL) encryption, which means you can use either HTTP or HTTPS. These endpoints are appropriate for all XML API requests made by authenticated users directly to your buckets and objects.
For connections through a proxy, see the FAQ entry on proxies for recommended practices.
Optional URIs for uploads and downloads
While you can use the above URIs for uploading and downloading objects, Cloud Storage also offers dedicated XML API endpoints for such requests. These upload and download endpoints may provide a small performance benefit when transferring large amounts of data.
For uploads, you can use either of:
For downloads, you can use either of:
All upload and download endpoints support secure sockets layer (SSL) encryption.
When using a
CNAME alias to redirect requests, you must use a special URI to
access Cloud Storage. A
CNAME redirect is a special DNS record that lets you
use a URL from your own domain to access resources, such as a bucket and
objects, in Cloud Storage without revealing the Cloud Storage URI. To do so,
you must use the following URI in the host name portion of your
For example, assume your domain is
example.com, and you want to make travel
maps available to your customers. You could create a bucket in Cloud Storage
travel-maps.example.com, and then create a
CNAME resource record in
DNS that redirects requests from
travel-maps.example.com to the
Cloud Storage URI. To do this, publish the following
CNAME record in DNS:
NAME TYPE DATA travel-maps.example.com CNAME c.storage.googleapis.com.
Your customers can then use the following URL to access a map of Paris:
Your domain registration service should have a way for you to administer
your domain, including adding a
CNAME resource record. For example, if you use
Google Domains, instructions for adding a resource record can be found on the
Google Domains Help page, in the Resource records drop-down section.
URI for authenticated browser downloads
The Cloud Storage authentication and authorization models support authenticated browser downloads for users who do not have Cloud Storage accounts. Authenticated browser downloads use cookie-based Google account authentication in conjunction with Google account-based ACLs. To download an object using cookie-based authentication you must use the following URL:
We strongly recommend using HTTPS for authenticated browser downloads, but both HTTP and HTTPS are supported. For more information about authenticated browser downloads, see Cookie-based Authentication.