GCP Dataproc clusters are anonymously or publicly accessible misconfiguration detected in code

Rule Details

Cortex AppSec Rule ID	APPSEC_GCP_98
Category - Subcategory	Public Exposure - Database Endpoints
Provider	GCP
Severity	HIGH
Framework	Terraform

Impact

Ensure that Dataproc clusters are not anonymously or publicly accessible

How to Fix

Resource: google_dataproc_cluster_iam_member

• Field: member
• Resource: google_dataproc_cluster_iam_binding
• Field: members //Option 1 [source,go]

---

resource "google_dataproc_cluster_iam_member" "editor" { cluster = "your-dataproc-cluster" role = "roles/editor"

• member = "allUsers"
• member = "allAuthenticatedUsers" }

//Option 2 resource "google_dataproc_cluster_iam_binding" "editor" { cluster = "your-dataproc-cluster" role = "roles/editor" members = [

• "allUsers",
• "allAuthenticatedUsers" ] }

---