Turbot Guardrails Hub 
Hub
  • Mods
  • Policy Packs
  • Docs
  • Home
ModsPolicy PacksDocsHome
Mods
GCP
Loading controls...

Control: GCP > Project > Organization Policy > Enforce uniform bucket-level access

Manage the GCP Organization Policy "Enforce uniform bucket-level access" for the project.

This boolean constraint requires buckets to use uniform bucket-level access where this constraint is set to True. Any new bucket in the Organization resource must have uniform

bucket-level access enabled, and no existing buckets in the organization resource can disable uniform bucket-level access.

Enforcement of this constraint is not retroactive: existing buckets with uniform bucket-level access disabled continue to have it disabled. The default value for this constraint is False.

Uniform bucket-level access disables the evaluation of ACLs assigned to Cloud Storage objects in the bucket. Consequently, only IAM policies grant access to objects in these buckets.

Resource Types

This control targets the following resource types:

  • GCP > Project

Policies

The following policies can be used to configure this control:

  • GCP > Project > Organization Policy > Enforce uniform bucket-level access

Category

  • Organization > Policy

In Your Workspace

  • Controls by Resource report
  • Controls by Control Type report

Developers

    Control Type URI
    • tmod:@turbot/gcp-orgpolicy#/control/types/storageUniformBucketLevelAccess
  • Category URI
    • tmod:@turbot/turbot#/control/categories/policy
  • GraphQL
    • query controlType(id: "tmod:@turbot/gcp-orgpolicy#/control/types/storageUniformBucketLevelAccess") { … }
    • query controls(filter: "controlTypeId:'tmod:@turbot/gcp-orgpolicy#/control/types/storageUniformBucketLevelAccess'") { … }
  • CLI
    • Get Controls
    • turbot graphql controls --filter "controlTypeId:tmod:@turbot/gcp-orgpolicy#/control/types/storageUniformBucketLevelAccess"
Guardrails
Guardrails Hub
  • Hub
  • Docs
  • Blog
  • Changelog
Products
  • GuardrailsGuardrails
  • PipesPipes
  • SteampipeSteampipe
  • PowerpipePowerpipe
  • FlowpipeFlowpipe
  • TailpipeTailpipe
Turbot
  • Home
  • About us
  • We're hiring!
  • Contact us
Community

Our community of practitioners love to discuss cloud governance & security.

Slack logoJoin us on Slack →

System StatusLegalSecurity
Terms of UseSecurityPrivacy
41
Mods
158
Resource Types
2,521
Policies
1,213
Controls
131
Quick Actions
93
IAM