risks / Data discovery


Allows an attacker to inventory stored data objects. May allow an attacker to focus attacks on specific data repositories. When object identifiers contain sensitive information (e.g. tenant identifiers), gives attackers access to this information.

Risk: LOW

This risk may assist in additional attacks, or gain access to confidential data that do not create organizational risk on their own.


  1. Avoid using sensitive data identifiers


  1. https:/​/​attack.mitre.org/​techniques/​T1619/​

Affected Privileges

An attacker may be able to exploit this risk if they gain any of the following privileges:

Google Cloud Platform

© 2023–present P0 Security and contributors to the IAM Privilege Catalog