Policy Packs

guardrails-samples

Ensure that only authorized users and applications can access the data, reducing the risk of data breaches and maintaining compliance.

Enforce GCP Storage Buckets Are Not Publicly Accessible

main

gcp_storage_bucket_policy_trusted_access

Check or Enforce access checking on the GCP Storage Bucket&#92;nPolicy.&#92;n&#92;nGoogle Cloud IAM allows you to control who has access to the&#92;nstorage bucket via an IAM Policy. The Trusted Access policy&#92;nallows you to configure whether Turbot will evaluate or&#92;nenforce restrictions on which members are allowed to be granted&#92;naccess.&#92;n&#92;nIf enabled, the members in the IAM policy will be evaluated&#92;nagainst the list of allowed members in each of the Trusted&#92;nAccess sub-policies (Trusted Access &gt; Domains,&#92;nTrusted Access &gt; Groups, etc).&#92;n&#92;nIf set to &quot;Enforce: Trusted Access &gt; *&quot;, access to non-trusted&#92;nmembers will be removed.&#92;n

bucketPolicyTrustedAccess

GCP > Storage > Bucket > Policy > Trusted Access

gcp_storage_bucket_policy_trusted_access_all_authenticated

Determine whether public access may be granted on GCP Storage Bucket.&#92;n&#92;nThis policy is used by the GCP &gt; Storage &gt; Bucket &gt; Policy &gt; Trusted Access&#92;ncontrol to determine whether grants to `allAuthenticatedUsers` is allowed.&#92;n

bucketPolicyTrustedAllAuthenticated

GCP > Storage > Bucket > Policy > Trusted Access > All Authenticated

gcp_storage_bucket_policy_trusted_access_all_users

Determine whether anonymous access may be granted on GCP Storage Bucket.&#92;n&#92;nThis policy is used by the GCP &gt; Storage &gt; Bucket &gt; Policy &gt; Trusted Access&#92;ncontrol to determine whether grants to `allUsers` is allowed.&#92;n

bucketPolicyTrustedAllUsers

GCP > Storage > Bucket > Policy > Trusted Access > All Users

turbot_policy_setting.gcp_storage_bucket_policy_trusted_access

turbot_policy_setting.gcp_storage_bucket_policy_trusted_access_all_authenticated

turbot_policy_setting.gcp_storage_bucket_policy_trusted_access_all_users

Policy	Setting	Note
GCP > Storage > Bucket > Policy > Trusted Access	Check: Trusted Access > *
GCP > Storage > Bucket > Policy > Trusted Access > All Authenticated	Do not allow allAuthenticatedUsers
GCP > Storage > Bucket > Policy > Trusted Access > All Users	Do not allow allUsers

Policy Settings