Public Access Prevention and Legacy ACL Evaluation Order
Google Cloud Storage's Public Access Prevention feature is designed to block all public ingress to a bucket and its objects when activated. The service documentation confirms that the flag blocks public access via IAM and ACLs, but it does not specify the evaluation sequence when both the bucket-level prevention flag and legacy ACL entries granting the AllUs