GCP-Storage-Storage-Bucket-All-Users-Policy

Owned by naveen
Dec 08, 2021
1 min read

Severity : High

Description : Storage buckets can be configured to allow the global principal to access the bucket via the bucket policy. This policy should be restricted only to known users or accounts.

Remediation Steps : Ensure that each storage bucket is configured so that no member is set to allUsers or allAuthenticatedUsers.

Blue Hexagon Proprietary