Cloud CDN and external Application Load Balancers support self-service Private Bucket Access for Cloud Storage buckets.

Cloud CDN and external Application Load Balancers support self-service Private Bucket Access for Cloud Storage buckets. This feature allows you to securely serve content without making your storage buckets public. The access on the buckets is managed securely via IAM permissions on a Google-managed service account. This feature is Generally Available.