Does it make more sense to save logs to a cloud storage bucket so that a person doesn't need access to the full GCVE machine to check the logs?
Would we want to keep the local log in place?
Could we do incremental logging to the same file (ie, append mode) to GCS for future auditor updates that write out incrementally?
Is there a better logging mechanism/pattern in GCP than just dumping files into buckets?