{
  "Provider": "gcp",
  "CheckID": "cloudstorage_bucket_public_access",
  "CheckTitle": "Ensure That Cloud Storage Bucket Is Not Anonymously or Publicly Accessible",
  "CheckType": [],
  "ServiceName": "cloudstorage",
  "SubServiceName": "",
  "ResourceIdTemplate": "",
  "Severity": "high",
  "ResourceType": "Bucket",
  "Description": "Ensure That Cloud Storage Bucket Is Not Anonymously or Publicly Accessible",
  "Risk": "Allowing anonymous or public access grants permissions to anyone to access bucket content. Such access might not be desired if you are storing any sensitive data. Hence, ensure that anonymous or public access to a bucket is not allowed.",
  "RelatedUrl": "",
  "Remediation": {
    "Code": {
      "CLI": "https://docs.bridgecrew.io/docs/bc_gcp_public_1#cli-command",
      "NativeIaC": "",
      "Other": "https://www.trendmicro.com/cloudoneconformity/knowledge-base/gcp/CloudStorage/publicly-accessible-storage-buckets.html",
      "Terraform": "https://docs.bridgecrew.io/docs/bc_gcp_public_1#terraform"
    },
    "Recommendation": {
      "Text": "It is recommended that IAM policy on Cloud Storage bucket does not allows anonymous or public access.",
      "Url": "https://cloud.google.com/storage/docs/access-control/iam-reference"
    }
  },
  "Categories": [
    "internet-exposed"
  ],
  "DependsOn": [],
  "RelatedTo": [],
  "Notes": ""
}
