"gcp.audit.method_name":storage.buckets.delete OR "gcp.audit.method_name":storage.buckets.insert OR "gcp.audit.method_name":storage.buckets.update OR "gcp.audit.method_name":storage.buckets.patch