Data at risk

Pub/Sub Topic is publicly or anonymously accessible

Risk Level

Hazardous (3)

Platform(s)

Description

Pub/Sub is a messaging service that allows services to communicate asynchronously. Pub/Sub Topic '{GcpPubSubTopic}' is publicly or anonymously accessible. Granting permissions to allUsers or allAuthenticatedUsers allows anyone to access the topic. Such access might not be desired if you are storing any sensitive data.
  • Recommended Mitigation

    It is recommended to remove 'allUsers' and 'allAuthenticatedUsers' from Pub/Sub Topic permissions