github.com/khulnasoft-lab/defsec@v1.0.5-0.20230827010352-5e9f46893d95/rules/cloud/policies/google/storage/no_public_access.tf.go (about)

     1  package storage
     2  
     3  var terraformNoPublicAccessGoodExamples = []string{
     4  	`
     5   resource "google_storage_bucket_iam_binding" "binding" {
     6   	bucket = google_storage_bucket.default.name
     7   	role = "roles/storage.admin"
     8   	members = [
     9   		"user:jane@example.com",
    10   	]
    11   }
    12   			`,
    13  }
    14  
    15  var terraformNoPublicAccessBadExamples = []string{
    16  	`
    17   resource "google_storage_bucket_iam_binding" "binding" {
    18   	bucket = google_storage_bucket.default.name
    19   	role = "roles/storage.admin"
    20   	members = [
    21   		"allAuthenticatedUsers",
    22   	]
    23   }
    24   			`,
    25  }
    26  
    27  var terraformNoPublicAccessLinks = []string{
    28  	`https://registry.terraform.io/providers/hashicorp/google/latest/docs/resources/storage_bucket_iam#member/members`,
    29  }
    30  
    31  var terraformNoPublicAccessRemediationMarkdown = ``