diff --git a/en/google/storage/storage-bucket-all-users-policy.md b/en/google/storage/storage-bucket-all-users-policy.md index 0623e01e7..6595ca994 100644 --- a/en/google/storage/storage-bucket-all-users-policy.md +++ b/en/google/storage/storage-bucket-all-users-policy.md @@ -15,5 +15,12 @@ | **Recommended Action** | Ensure that each storage bucket is configured so that no member is set to allUsers or allAuthenticatedUsers. | ## Detailed Remediation Steps - +1. Log into the Google Cloud Platform Console. +2. Scroll down the left navigation panel and choose "Cloud Storage" to select the "Buckets" option.
+3. On the "Buckets" page, select the bucket which you want to configure by clicking on its name.
+4. Select the "PERMISSIONS" tab to access the permissions defined for selected bucket.
+5. Select the "VIEW BY PRINCIPALS" tab to display all IAM members (principals) that have access to the selected resource.
+6. Select all the allUsers and allAuthenticatedUsers principals available and choose REMOVE ACCESS to initiate the removal action for the selected bindings.
+7. On the removal confirmation box, choose "CONFIRM" to remove the allUsers and/or allAuthenticatedUsers principals.
+8. Repeat steps number 4-7 to remove all allUsers or allAuthenticatedUsers access from all other buckets in the project.
diff --git a/resources/google/storage/storage-bucket-all-user-policy/step2.png b/resources/google/storage/storage-bucket-all-user-policy/step2.png new file mode 100644 index 000000000..d9415eee8 Binary files /dev/null and b/resources/google/storage/storage-bucket-all-user-policy/step2.png differ diff --git a/resources/google/storage/storage-bucket-all-user-policy/step3.png b/resources/google/storage/storage-bucket-all-user-policy/step3.png new file mode 100644 index 000000000..42e575323 Binary files /dev/null and b/resources/google/storage/storage-bucket-all-user-policy/step3.png differ diff --git a/resources/google/storage/storage-bucket-all-user-policy/step4.png b/resources/google/storage/storage-bucket-all-user-policy/step4.png new file mode 100644 index 000000000..1eae02855 Binary files /dev/null and b/resources/google/storage/storage-bucket-all-user-policy/step4.png differ diff --git a/resources/google/storage/storage-bucket-all-user-policy/step5.png b/resources/google/storage/storage-bucket-all-user-policy/step5.png new file mode 100644 index 000000000..aef6a8428 Binary files /dev/null and b/resources/google/storage/storage-bucket-all-user-policy/step5.png differ diff --git a/resources/google/storage/storage-bucket-all-user-policy/step6.png b/resources/google/storage/storage-bucket-all-user-policy/step6.png new file mode 100644 index 000000000..ddeb9ee73 Binary files /dev/null and b/resources/google/storage/storage-bucket-all-user-policy/step6.png differ diff --git a/resources/google/storage/storage-bucket-all-user-policy/step7.png b/resources/google/storage/storage-bucket-all-user-policy/step7.png new file mode 100644 index 000000000..7fa27f03c Binary files /dev/null and b/resources/google/storage/storage-bucket-all-user-policy/step7.png differ