{
  "Provider": "gcp",
  "CheckID": "bigquery_dataset_public_access",
  "CheckTitle": "Ensure That BigQuery Datasets Are Not Anonymously or Publicly Accessible.",
  "CheckType": [],
  "ServiceName": "bigquery",
  "SubServiceName": "",
  "ResourceIdTemplate": "",
  "Severity": "high",
  "ResourceType": "Dataset",
  "Description": "Ensure That BigQuery Datasets Are Not Anonymously or Publicly Accessible.",
  "Risk": "Granting permissions to allUsers or allAuthenticatedUsers allows anyone to access the dataset. Such access might not be desirable if sensitive data is being stored in the dataset. Therefore, ensure that anonymous and/or public access to a dataset is not allowed.",
  "RelatedUrl": "",
  "Remediation": {
    "Code": {
      "CLI": "",
      "NativeIaC": "",
      "Other": "https://www.trendmicro.com/cloudoneconformity/knowledge-base/gcp/BigQuery/publicly-accessible-big-query-datasets.html",
      "Terraform": "https://docs.bridgecrew.io/docs/bc_gcp_general_3#terraform"
    },
    "Recommendation": {
      "Text": "It is recommended that the IAM policy on BigQuery datasets does not allow anonymous and/or public access.",
      "Url": "https://cloud.google.com/bigquery/docs/customer-managed-encryption"
    }
  },
  "Categories": [],
  "DependsOn": [],
  "RelatedTo": [],
  "Notes": ""
}
