Cloud Storage Bucket Logging Not Enabled

Query id: 48f7e44d-d1d1-44c2-b336-9f11b65c4fb0
Query name: Cloud Storage Bucket Logging Not Enabled
Platform: Pulumi
Severity: Medium
Category: Observability
CWE: 778
URL: Github

Description¶

Cloud storage bucket should have logging enabled
Documentation

Code samples¶

Code samples with security vulnerabilities¶

Positive test num. 1 - yaml file

name: aws-eks
runtime: yaml
description: An EKS cluster
resources:
  example:
    type: gcp:storage:Bucket
    properties:
      location: US-CENTRAL1

Code samples without security vulnerabilities¶

Negative test num. 1 - yaml file

name: aws-eks
runtime: yaml
description: An EKS cluster
resources:
  example:
    type: gcp:storage:Bucket
    properties:
      location: US-CENTRAL1
      logging:
        logObjectPrefix: some_obj_prefix