Remove GCP Bucket AllUsers Access

This CLI command requires 'storage.buckets.getIamPolicy' and 'storage.buckets.setIamPolicy' permissions. Successful execution will revoke 'allUsers' permission access in GCP Storage buckets.

Cloud Security Posture Management Playbooks

Details

IDc9e39d9c2c3b123c7c36782ea26cb4df
Suggestion ReasonRecommended for remediating publicly accessible GCP buckets

Source

Trigger_-_Remove_GCP_Bucket_AllUsers_Access.json
Download History Raw 
{
  "trigger_id": "c9e39d9c2c3b123c7c36782ea26cb4df",
  "playbook_id": "",
  "suggestion_reason": "Recommended for remediating publicly accessible GCP buckets",
  "description": "This CLI command requires 'storage.buckets.getIamPolicy' and 'storage.buckets.setIamPolicy' permissions. Successful execution will revoke 'allUsers' permission access in GCP Storage buckets.",
  "trigger_name": "Remove GCP Bucket AllUsers Access",
  "automation_type": "command",
  "automation_id": "gcp-storage-bucket-policy-delete-remove-allusers-access-quick-action",
  "alerts_filter": {
    "filter": {
      "OR": [
        {
          "SEARCH_FIELD": "matching_service_rule_id",
          "SEARCH_TYPE": "EQ",
          "SEARCH_VALUE": "41f7a4b1-cad6-4fbf-b698-1fd11a8869a8"
        }
      ]
    }
  }
}