Description

Detects GCP Cloud Storage buckets that have uniform bucket-level access disabled. Uniform bucket-level access enforces consistent permissions at the bucket level rather than allowing mixed bucket and object-level permissions, which can lead to security gaps and access control complexity. Disabling this feature increases security risks by allowing potentially inconsistent and granular access controls.

Detection Strategy

• Scans all Cloud Storage buckets in the GCP project

• Reports a vulnerability when a bucket's 'uniformBucketLevelAccess' setting is disabled (set to false)

• For each vulnerable bucket, captures the bucket path and IAM configuration details in the vulnerability report