GCP Cloud Run services are anonymously or publicly accessible misconfiguration detected in code

Rule Details

Cortex AppSec Rule ID	APPSEC_GCP_102
Category - Subcategory	Public Exposure - APIs
Provider	GCP
Severity	MEDIUM
Framework	Terraform

Impact

Ensure that GCP Cloud Run services are not anonymously or publicly accessible

How to Fix

Resource: google_cloud_run_service_iam_binding

• Field: members
• Resource: google_cloud_run_service_iam_member
• Field: member [source,go]

---

resource "google_cloud_run_service_iam_binding" "public_binding" { location = google_cloud_run_service.default.location service = google_cloud_run_service.default.name role = "roles/run.invoker"

members = [

• "allUsers",
• "allAuthenticatedUsers", ] }

resource "google_cloud_run_service_iam_member" "public_member" { location = google_cloud_run_service.default.location service = google_cloud_run_service.default.name role = "roles/run.invoker"

• member = "allUsers"
• member = "allAuthenticatedUsers" }

---