Query: Ensure that Cloud Storage bucket used for exporting logs is not anonymously or publicly accessible

Description

It is recommended that IAM policy on Cloud Storage bucket used for exporting logs does not allows anonymous or public access.

Query

Tables used in this query:

• gcp_logging_sink
• gcp_storage_bucket

Controls using this query:

• Ensure that Cloud Storage bucket used for exporting logs is not anonymously or publicly accessible

SQL