Google Drive: Overly Permissive Access

Objective: Identify and restrict files containing sensitive data shared with external users.

• Trigger: external users can view, resource contains high or critical sensitivity data

• Filter: Drive name is HR

  • Additional options: File name

• Action: send a Slack notification; auto-remove external users