Permissions

The GCP CIS v2.0.0 - Section 5 - Storage policy pack requires 2 permissions:

• storage.buckets.setIamPolicy
• storage.buckets.update