Control: Ensure that Cloud Storage bucket used for exporting logs is not anonymously or publicly accessible
Description
It is recommended that IAM policy on Cloud Storage bucket used for exporting logs does not allows anonymous or public access.
Usage
Run the control in your terminal:
powerpipe control run gcp_compliance.control.storage_bucket_log_not_publicly_accessibleSnapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run gcp_compliance.control.storage_bucket_log_not_publicly_accessible --shareSQL
This control uses a named query:
storage_bucket_log_not_publicly_accessible