More Info:

It is recommended that the IAM policy on BigQuery datasets does not allow anonymous and/or public access.

Risk Level

Medium

Address

Security

Compliance Standards

CISGCP, CBP, HITRUST, GDPR, SOC2, NISTCSF, PCIDSS, FedRAMP

Triage and Remediation

Remediation

To remediate this misconfiguration in GCP using GCP console, you can follow these steps:

  1. Open the GCP console and navigate to the BigQuery section.

  2. Click on the dataset that you want to remediate.

  3. In the dataset details page, click on the “Share dataset” button.

  4. In the “Share dataset” dialog box, review the current access controls.

  5. If the dataset is publicly accessible, click on the “X” next to the “allUsers” entry to remove it.

  6. If the dataset is anonymously accessible, click on the “X” next to the “allAuthenticatedUsers” entry to remove it.

  7. If you want to grant access to specific users or groups, click on the “Add item” button and enter their email addresses.

  8. Choose the appropriate access level for the users or groups, such as “Viewer” or “Editor”.

  9. Click on the “Save” button to apply the changes.

  10. Finally, verify that the dataset is no longer publicly or anonymously accessible by reviewing the access controls again.

Additional Reading: