Set up the gcp integration.
Detect when an administrative change to a GCS Bucket has been made. This could change the retention policy or bucket lock. For more information, see the GCS Bucket Lock docs.
This rule lets you monitor GCS bucket admin activity audit logs to determine if a bucket has been updated with the following method: