We need to add support for a new field publicAccessPrevention in the bucket IAM configuration for storage. Full details are available in this doc. This should include ability to create buckets with this field set, get the field, and set the field. We'd also like an integration test that verifies that the feature works as expected.

Please wait for approval from myself or @tritone before merging or releasing this change so we can coordinate around release dates.