{
  "trigger_id": "c9e39d9c2c3b123c7c36782ea26cb4df",
  "playbook_id": "",
  "suggestion_reason": "Recommended for remediating publicly accessible GCP buckets",
  "description": "This CLI command requires 'storage.buckets.getIamPolicy' and 'storage.buckets.setIamPolicy' permissions. Successful execution will revoke 'allUsers' permission access in GCP Storage buckets.",
  "trigger_name": "Remove GCP Bucket AllUsers Access",
  "automation_type": "command",
  "automation_id": "gcp-storage-bucket-policy-delete-remove-allusers-access-quick-action",
  "alerts_filter": {
    "filter": {
      "OR": [
        {
          "SEARCH_FIELD": "matching_service_rule_id",
          "SEARCH_TYPE": "EQ",
          "SEARCH_VALUE": "41f7a4b1-cad6-4fbf-b698-1fd11a8869a8"
        }
      ]
    }
  }
}