How to resolve Sprinto check to restrict anonymous or public access to GCP BigQuery Datasets

About:

Sprinto check: Ensure That BigQuery Datasets Are Not Anonymously or Publicly Accessible

The above-mentioned sprinto check verifies that the GCP BigQuery Datasets are not accessible to anonymous or public internet.

Purpose:

The purpose of this check is to enforce the security of your BigQuery datasets by ensuring they are not anonymously or publicly accessible. Unauthorized access to datasets can lead to data breaches, privacy violations, and other security risks. By conducting this check, you can verify that appropriate access controls are in place, mitigating the potential for unauthorized data access or manipulation.

How to resolve this check:

Follow the below applicable steps to resolve this check:

Before you begin

• Ensure you have the administrator privileges on the GCP account you wish to make the configuration changes.

Updating via. GCP control panel

1. Log in to the GCP Console using your credentials.

2. Navigate to the BigQuery service.

3. Select your desired dataset under Resources.

4. Click the Share option, and select the Permission tab.

5. Review each added role for permission.

6. Click the delete icon followed by Remove from the pop-up window for the following roles:

   • allUsers

   • allAuthenticatedUsers

Sprinto detects the configuration change, and set the check status to “Passing.”

Contact Sprinto support if you have any queries related to the check or need assistance.