Trigger - GCP Public Access Misconfiguration

Suggests a playbook that automatically remediates two high-severity misconfiguration issues caused by GCP Storage buckets accessible to allUsers or allAuthenticatedUsers.

Cloud Security Posture Management Playbooks

Details

ID4604414a45bf3bdba97decbc840f46d8
From Version8.11.0
Runs PlaybookGCP Public Access Misconfiguration - Auto-remediate
Suggestion ReasonAutomatically secure the publicly exposed GCP bucket by updating policies to block public access immediately.

Source

Trigger_-_GCP_Public_Access_Misconfiguration.json
Download History Raw 
{
  "trigger_id": "4604414a45bf3bdba97decbc840f46d8",
  "trigger_name": "Trigger - GCP Public Access Misconfiguration",
  "playbook_id": "GCP Public Access Misconfiguration - Auto-remediate",
  "suggestion_reason": "Automatically secure the publicly exposed GCP bucket by updating policies to block public access immediately.",
  "description": "Suggests a playbook that automatically remediates two high-severity misconfiguration issues caused by GCP Storage buckets accessible to allUsers or allAuthenticatedUsers.",
  "alerts_filter": {
    "filter": {
        "OR": [
            {
            "SEARCH_FIELD": "matching_service_rule_id",
            "SEARCH_TYPE": "WILDCARD",
            "SEARCH_VALUE": "41f7a4b1-cad6-4fbf-b698-1fd11a8869a8"
            },
            {
            "SEARCH_FIELD": "matching_service_rule_id",
            "SEARCH_TYPE": "WILDCARD",
            "SEARCH_VALUE": "9f08e13c-cdd6-4ad1-89f5-ffef6a71e432"
            }
        ]
        }
    },
    "fromVersion": "8.11.0"
}