Mods

turbot/terraform_gcp_compliance

GitHub
Overview
9Dashboards
55Controls
55Queries
0Variables
GitHub
Loading controls...
On This Page
Description
Usage
SQL
Tags
Get Involved
Edit on GitHub
Discuss on Slack

Control: Ensure that Cloud Storage bucket is not anonymously or publicly accessible

Description

It is recommended that IAM policy on a Cloud Storage bucket does not allow anonymous or public access.

Usage

Run the control in your terminal:

steampipe check terraform_gcp_compliance.control.storage_bucket_not_publicly_accessible

Snapshot and share results via Steampipe Cloud:

steampipe login
steampipe check --share terraform_gcp_compliance.control.storage_bucket_not_publicly_accessible

SQL

This control uses a named query:

storage_bucket_not_publicly_accessible

Tags

category = Compliance
cis = true
cis_item_id = 5.1
cis_level = 1
cis_type = automated
plugin = terraform
service = GCP/Storage