CRITICAL
Source
Trivy
ID
AVD-GCP-0046

BigQuery datasets should only be accessible within the organisation

Using ‘allAuthenticatedUsers’ provides any GCP user - even those outside of your organisation - access to your BigQuery dataset.

Impact

Follow the appropriate remediation steps below to resolve the issue.

Configure access permissions with higher granularity

1
2
3
4
5
6
resource "google_bigquery_dataset" "good_example" {
  dataset_id                  = "example_dataset"
  friendly_name               = "test"
  location                    = "EU"
  default_table_expiration_ms = 3600000
}