Ensure logging is enabled for Google Cloud Storage Buckets

Logging allows administrators to audit storage bucket use, which is often required by compliance frameworks or industry regulations. For more information on storage logs, see the GCP documentation.
References:
https://cloud.google.com/storage/docs/access-logs

Audit logging is configured in the GCP Console UI, however log delivery is configured using the gsutil command-line or with Terraform. For more information on log delivery, see the GCP access-logs documentation (below).

To configure Audit logging:
In GCP Console -

1. Log into the GCP Console and go to IAM.
2. Select Audit Logs in the navigation bar.
3. Use the filter to find Cloud Storage and select the result.
4. Enable the specific log types as needed and select Save.

To configure log delivery:
In Terraform -

1. In the google_storage_bucket resource, configure the logging block with a log_bucket location for log storage.

References:
https://cloud.google.com/storage/docs/access-logs
https://cloud.google.com/storage/docs/audit-logging
https://registry.terraform.io/providers/hashicorp/google/latest/docs/resources/storage_bucket#nested_logging