Metadata

Id: terraform-gcp-cloud-storage-bucket-versioning-disabled

Provider: GCP

Platform: Terraform

Severity: Medium

Category: Observability

Learn More

• Provider Reference

Description

Enabling versioning on a Google Cloud Storage bucket ensures that previous versions of objects are preserved, preventing accidental or malicious data loss or overwrites. Without versioning enabled (for example, versioning = { enabled = false } or omitting the versioning block entirely), deleted or overwritten objects cannot be recovered, increasing the risk of permanent data loss. To mitigate this risk, enable versioning by setting versioning = { enabled = true } in your Terraform configuration:

resource "google_storage_bucket" "secure_example" {
  name     = "foo"
  location = "EU"

  versioning = {
    enabled = true
  }
}

Compliant Code Examples

resource "google_storage_bucket" "negative1" {
  name     = "foo"
  location = "EU"

  versioning = {
    enabled = true
  }
}

Non-Compliant Code Examples

resource "google_storage_bucket" "positive1" {
  name     = "foo"
  location = "EU"

  versioning = {
    enabled = false
  }
}

resource "google_storage_bucket" "positive2" {
  name     = "foo"
  location = "EU"
}