---
title: Google Cloud Storage Bucket contents downloaded without authentication
description: Datadog, the leading service for cloud-scale monitoring.
breadcrumbs: >-
  Docs > Datadog Security > OOTB Rules > Google Cloud Storage Bucket contents
  downloaded without authentication
---

# Google Cloud Storage Bucket contents downloaded without authentication
Classification:attackTactic:[TA0009-collection](https://attack.mitre.org/tactics/TA0009)Technique:[T1530-data-from-cloud-storage](https://attack.mitre.org/techniques/T1530) 
## Goal{% #goal %}

Detect unauthenticated access to an object in a GCS bucket (`bucket_name`).

## Strategy{% #strategy %}

Monitor GCS bucket (`bucket_name`) for get requests(`@evt.name:storage.objects.get`) made by unauthenticated users (`@usr.id`).

## Triage and response{% #triage-and-response %}

Investigate the logs and determine whether or not the accessed bucket: {{bucket_name}} should be accessible to unauthenticated users.

## Changelog{% #changelog %}

- 27 October 2022 - updated tags.