Request URIs

This page explains the different request endpoints (URIs) used to access Google Cloud Storage through the XML API. The endpoint you use depends on the operation you perform and the type of request you make.

URIs for standard requests

For most requests, use either of the following URLs to access buckets and objects, replacing [VALUES_IN_BRACKETS] with the appropriate values:[BUCKET_NAME]/[OBJECT_NAME]

Both endpoints support secure sockets layer (SSL) encryption, which means you can use either HTTP or HTTPS. These endpoints are appropriate for all XML API requests made by authenticated users directly to your buckets and objects.

For connections through a proxy, see the FAQ entry on proxies for recommended practices.

Optional URIs for uploads and downloads

While you can use the above URIs for uploading and downloading objects, Cloud Storage also offers dedicated XML API endpoints for such requests. These upload and download endpoints may provide a small performance benefit when transferring large amounts of data.

For uploads, you can use either of:[BUCKET_NAME]/[OBJECT_NAME]

For downloads, you can use either of:[BUCKET_NAME]/[OBJECT_NAME]

All upload and download endpoints support secure sockets layer (SSL) encryption.

URI for CNAME redirects

When using a CNAME alias to redirect requests, you must use a special URI to access Cloud Storage. A CNAME redirect is a special DNS record that lets you use a URL from your own domain to access resources, such as a bucket and objects, in Cloud Storage without revealing the Cloud Storage URI. To do so, you must use the following URI in the host name portion of your CNAME record:

For example, assume your domain is, and you want to make travel maps available to your customers. You could create a bucket in Cloud Storage called, and then create a CNAME resource record in DNS that redirects requests from to the Cloud Storage URI. To do this, publish the following CNAME record in DNS:

NAME                      TYPE     DATA   CNAME

Your customers can then use the following URL to access a map of Paris:

Your domain registration service should have a way for you to administer your domain, including adding a CNAME resource record. For example, if you use Google Domains, instructions for adding a resource record can be found on the Google Domains Help page, in the Resource records drop-down section.

URI for authenticated browser downloads

The Cloud Storage authentication and authorization models support authenticated browser downloads for users who do not have Cloud Storage accounts. Authenticated browser downloads use cookie-based Google account authentication in conjunction with Google account-based ACLs. To download an object using cookie-based authentication you must use the following URL:[BUCKET_NAME]/[OBJECT_NAME]

We strongly recommend using HTTPS for authenticated browser downloads, but both HTTP and HTTPS are supported. For more information about authenticated browser downloads, see Cookie-based Authentication.

Monitor your resources on the go

Get the Google Cloud Console app to help you manage your projects.

Send feedback about...

Cloud Storage