Skip to main content

​
Custom response pages

Open Custom response pages, create a page set, and customize the block, challenge, and browser requirement states you need. Preview each state before saving and assign the set to the intended protected domains. Keep recovery instructions understandable to a visitor who cannot access your application.

​
Access control

With the access-control add-on, an organization administrator can assign a Cloud Shield viewer, editor, or administrator role to an existing member. Open Access control → Assign role, select the member, and choose a role. These assignments restrict existing project access. They do not add organization membership or grant project permissions. A viewer cannot change protection. Review members and permissions when a member cannot reach the project.

​
Audit events

With the audit-log add-on, open Audit logs to review recent actions, actors, paths, status codes, and timestamps. The current view returns the latest 100 events for the selected project. Do not treat this view as an unlimited historical archive.

​
SIEM integration

With the SIEM integration add-on, use the event-export view to select your domain, time range, and filters. Review the results and download the available export for your investigation workflow. Automated clients can use the SIEM endpoints in the Cloud Shield reference. This workflow retrieves events; it does not configure an outbound delivery destination.

​
Usage and pre-billing

Open Usage & pre-billing and select a billing month. Review protected requests, requests passed to the origin, protected domains, or CDN traffic volume. The breakdown groups daily usage by the project’s protected distributions. Pre-billing totals are provisional. Organization billing combines consumption across projects, applies the subscription’s included usage and rates, and shows final invoices. Domain usage uses the peak value; additive metrics use their accrued totals. Review Billing → Usage and Billing → Subscription for organization totals and the current plan.

​
Hostnames and TLS

Use the domain’s CDN connection page to open the linked distribution and inspect setup status. Manage hostname and certificate changes in Cloud CDN and TLS Manager. Cloud Shield does not upload or renew a separate certificate for the attached distribution.