catalog logoThe IAM Privilege Catalog

services / Google Cloud / Operations

Manages Cloud Datastore admin operations that include importing and exporting large amounts of data, running complex queries analyze data and generate reports.

Long running operations incur costs and infrastructure, having cancel privileges results in spend.

datastore.​operations.​delete

Deletes a completed Cloud Datastore admin operation. This results in loss of history of operations that are performed in the system.

Risks

  1. Logs destruction (EVASION)

Scope: MEDIUM

This privilege may grant access to confidential data, or its exploit can incur operational cost.

Links

  • https:​/​/​cloud.​google.​com/​datastore/​docs/​export-​import-​entities#​listing_​all_​long-​running_​operations
  • https:​/​/​cloud.​google.​com/​datastore/​docs/​reference/​admin/​rest/​v1/​projects.​operations

    • Contributed by P0 Security

    © 2023–present P0 Security and contributors to the IAM Privilege Catalog