Description

Identifies Google Cloud Storage buckets that have object versioning disabled. Object versioning is a critical data protection feature that maintains a history of object modifications and deletions, allowing recovery from accidental or malicious changes. Disabled versioning increases the risk of permanent data loss.

Detection Strategy

• Checks each Cloud Storage bucket in the GCP project for versioning configuration

• Reports a vulnerability when a bucket's versioning_enabled property is set to false

• Captures the bucket path and project ID in the vulnerability report for remediation