GCP BigQuery Tables are anonymously or publicly accessible misconfiguration detected in code

Rule Details

Cortex AppSec Rule ID	APPSEC_GCP_100
Category - Subcategory	Public Exposure - Storage Buckets
Provider	GCP
Severity	HIGH
Framework	Terraform

Impact

Ensure that BigQuery Tables are not anonymously or publicly accessible

How to Fix

Resource: google_bigquery_table_iam_member

• Field: member
• Resource: google_bigquery_table_iam_binding
• Field: members //Option 1

[source,go]

resource "google_bigquery_table_iam_member" "member" { dataset_id = google_bigquery_table.default.dataset_id table_id = google_bigquery_table.default.table_id role = "roles/bigquery.dataOwner"

• member = "allUsers"
• member = "allAuthenticatedUsers" }

//Option 2 resource "google_bigquery_table_iam_binding" "binding" { dataset_id = google_bigquery_table.default.dataset_id table_id = google_bigquery_table.default.table_id role = "roles/bigquery.dataOwner" members = [

• "allUsers",
• "allAuthenticatedUsers" ] }

---