Finding · sample
Illustrative sample, not customer data
storage bucket made public, production account.
- Resource
- Storage bucket, production account
- Severity
- Critical
- Owner
- Platform team
- Status
- Open
What we saw
Cost 09:12
Spend on a storage service starts to rise for this resource.
Security 09:14
The bucket's access settings now allow public access.
Compliance 09:20
A control requiring private storage in production starts to fail.
Three signals, one cause: shown as one finding rather than three alerts.
Evidence
- Billing data showing the cost change for this resource
- Configuration data showing the access setting change
- Audit log entry showing who changed it and when
- The failing control and the resource it applies to
Suggested fix
- Confirm whether public access was intended.
- If not, block public access on the bucket.
- Review what was reachable while it was public.
- Re-check the failing control and close the finding.
A recommended fix, with owner and status tracked in OpsOne.
Status timeline
09:12 · Cost signal detected
09:14 · Security signal detected and linked to the same resource
09:20 · Compliance signal detected and linked; finding raised as Critical
Next · Owner assigned, fix recommended, status: Open