logging.logs.delete – 1 risks

The IAM Privilege Catalog

services / Google Cloud / Cloud Logging Logs

A Cloud Logging log contains log entries.

logging.logs.delete

Destroys all log entries.

Risks

Logs destruction (EVASION)

Scope: MEDIUM

This privilege may grant access to confidential data, or its exploit can incur operational cost.

Links

https://cloud.google.com/logging/docs/reference/v2/rest/v2/organizations.logs

https://cloud.google.com/logging/docs/access-control

Contributed by P0 Security

© 2023–present P0 Security and contributors to the IAM Privilege Catalog