MEDIUM
Source
Trivy
ID
AVD-GCP-0078

Cloud Storage Bucket Versioning Disabled

Object versioning in Cloud Storage is recommended to protect against accidental or malicious deletions.

Impact

Follow the appropriate remediation steps below to resolve the issue.

Enable object versioning on Cloud Storage buckets to preserve older versions of objects. In Terraform, set versioning { enabled = true } for the bucket resource.

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
resource "google_storage_bucket" "default" {
  name                        = "my-default-bucket"
  location                    = "EU"
  force_destroy               = true
  uniform_bucket_level_access = true

  versioning {
    enabled = true
  }
}