GCP storage buckets are publicly accessible to all authenticated users TF-S2028

Allowing anonymous or public access to a Cloud Storage bucket grants permission to anyone to access the bucket's content. If you are storing sensitive data in the bucket, anonymous and public access may not be desired. It is recommended to ensure anonymous and public access to a bucket is not allowed.