Set enforced for public_access_prevention

joreetz-otto · joreetz-otto · commit 716a76495487 · 2025-01-20T11:09:00.000+01:00
diff --git a/tf/bucket/main.tf b/tf/bucket/main.tf
@@ -31,6 +31,7 @@ resource "google_storage_bucket" "main" {
   location = var.location
 
   force_destroy               = var.force_destroy
+  public_access_prevention    = "enforced"
   uniform_bucket_level_access = true
 
   dynamic "retention_policy" {
