PermissionsThe Enforce GCP Storage Buckets Are Not Publicly Accessible policy pack requires 1 permission:storage.buckets.setIamPolicy