Bucket Logging
Ensures object logging is enabled on storage buckets
Storage bucket logging helps maintain an audit trail of access that can be used in the event of a security incident.
Recommended Actions
Follow the appropriate remediation steps below to resolve the issue.
-
Log into the Google Cloud Platform Console.
-
Scroll down the left navigation panel and choose “Cloud Storage” to select the “Buckets” option.
-
On the “Buckets” page, create the log bucket if you dont have one.
-
Click on the ‘cloud shell’ icon on the top left of navigation bar ,as bucket logging can only be enabled by using the Command Line Interface.
-
Enter the command gsutil logging set on -b gs://[LOG_BUCKET_NAME] -o AccessLog gs://[BUCKET_NAME]
-
Repeat steps number 4-5 to enable logging to all other buckets in the project.