---
title: GCS Bucket with public write at risk of malicious hosting
description: Datadog, the leading service for cloud-scale monitoring.
breadcrumbs: >-
  Docs > Datadog Security > OOTB Rules > GCS Bucket with public write at risk of
  malicious hosting
---

> For the complete documentation index, see [llms.txt](https://docs.datadoghq.com/llms.txt).

# GCS Bucket with public write at risk of malicious hosting
 
## Description{% #description %}

A Google Cloud Storage bucket is publicly accessible and allows public writes. An attacker could use the bucket's reputation and bandwidth to host malware or other malicious content, or to overwrite existing objects.

## Remediation{% #remediation %}

1. Update the bucket's IAM policy to remove public write access (`allUsers` and `allAuthenticatedUsers` with write/owner roles). See the [official documentation](https://cloud.google.com/storage/docs/access-control/making-data-public) for more information about disabling public access.
1. Restrict bucket access to the necessary users or service accounts by reviewing IAM policies and bucket-level permissions. For more information, see the [official documentation](https://cloud.google.com/storage/docs/access-control/iam).