GCP Misconfigurations
Storage Audit
GCP Misconfigurations
Storage Audit
Checks performed
- Bucket Versioning Should Be Enabled
- Bucket Logging Should Be Enabled
- Bucket Should Not Allow Global Access
- Buckets Should Have Uniform Access
- Storage Bucket Logs Should Not be Publicly Accessible
- Buckets Should Be Encrypted Using Customer Managed Keys (CMKs)
- Buckets Should Not Allow All Users to Write
- Buckets Should Not Allow All Authenticated Users to Write
- Buckets Should Not Allow Public Ownership
- Buckets Should Not Allow All Authenticated Users Ownership
- Buckets Should Not Allow All Users Reads
- Buckets Should Not Allow All Authenticated User Reads
- Buckets Should Have DNS Compliant Names
- Storage Buckets Should Have A Retention Policy Defined
- Buckets Should Have Lifecycle Rules Configured
- List All Buckets which have Wite Configuration
- Retention Policy Must Be Locked with a Specified Minimum Duration