Google Cloud Storage

Public bucket exposure and data residency are the two GCP storage questions that come up in almost every audit. Iru connects to Google Cloud Storage and reads bucket IAM bindings, audit logs, and encryption metadata directly to answer both.

Key Capabilities

• Verify bucket access follows least privilege
• Confirm data residency matches your commitments
• Track object access as it's logged and authorized
• Show that encryption posture is known, not assumed

Evidence Collected

• Bucket IAM bindings
• Admin Activity and Data Access audit logs
• Bucket configuration history
• Location and storage class settings
• Encryption metadata and Access Transparency where in scope

Learn more