GCP Storage Bucket Opened To Public

Google SecOps@GoogleSecOps

•updated Jan 30, 2025•2•0•43

This rule detects when a Google Cloud Storage bucket's access policy is modified to allow public access. This occurs when 'allUsers' or 'allAuthenticatedUsers' are added to the bucket's permissions, granting broad access to its contents. Such a configuration can lead to unintended data exposure and is a significant security risk.