Skip to content

Policy for Enforce Public Access Prevention #2047

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
aumohr opened this issue Feb 5, 2024 · 0 comments · Fixed by #2050
Closed

Policy for Enforce Public Access Prevention #2047

aumohr opened this issue Feb 5, 2024 · 0 comments · Fixed by #2050
Labels

Comments

@aumohr
Copy link
Collaborator

aumohr commented Feb 5, 2024

Describe the bug
The policy "Policy for Enforce Public Access Prevention" is not activated by default even though advised by GCP security best practices.

Rationale
Secure your Cloud Storage data from public exposure by enforcing public access prevention. This governance policy prevents existing and future resources from being accessed via the public internet by disabling and blocking ACLs and IAM permissions that grant access to allUsers and allAuthenticatedUsers.

Recommendation
Enforce this policy on the entire organization (recommended), specific projects, or specific folders to ensure no data is publicly exposed.
This policy overrides existing public permissions.

@aumohr aumohr added the cspr label Feb 5, 2024
juliocc added a commit that referenced this issue Feb 5, 2024
juliocc added a commit that referenced this issue Feb 5, 2024
* Enable additional recommended org policies

Fixes #2047
Fixes #2048
Fixes #2049

* Fix tests
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

Successfully merging a pull request may close this issue.

1 participant