turbot/gcp_compliance

Query: bigquery_dataset_not_publicly_accessible

Usage

powerpipe query gcp_compliance.query.bigquery_dataset_not_publicly_accessible

Steampipe Tables

SQL

select
self_link resource,
case
when access @> '[{"specialGroup": "allAuthenticatedUsers"}]' or access @> '[{"iamMember": "allUsers"}]' then 'alarm'
else 'ok'
end as status,
case
when access @> '[{"specialGroup": "allAuthenticatedUsers"}]' or access @> '[{"iamMember": "allUsers"}]'
then title || ' publicly accessible.'
else title || ' not anonymously or publicly accessible.'
end as reason
, location as location, project as project
from
gcp_bigquery_dataset;

Controls

The query is being used by the following controls: