GCP-cloud-storage-bucket-with-uniform-bucket-level-access-disabled

Severity: Medium

Description: This control identifies GCP storage buckets for which the uniform bucket-level access is disabled. Enabling uniform bucket-level access guarantees that if a Storage bucket is not publicly accessible, no object in the bucket is publicly accessible either. It is recommended that uniform bucket-level access is enabled on Cloud Storage buckets.

Remediation Steps:

Perform following to enable uniform bucket level access :

log in to GCP Console.
Navigate to Storage.
Click on Browser to get the list of storage buckets.
Search for the alerted bucket and click on the bucket name.
From the top menu go to PERMISSION tab.
Under the section Access control, click on SWITCH TO UNIFORM.
On the pop-up window select uniform.
Click on Save.

Important:

Reference:

https://cloud.google.com/storage/docs/using-uniform-bucket-level-access#enable