chronicle · salvatoreasammito · Aug 31, 2026
diff --git a/content/playbooks/third_party/community/gcp_storage_compliance_audit/definition.yaml b/content/playbooks/third_party/community/gcp_storage_compliance_audit/definition.yaml
@@ -0,0 +1,29 @@
+identifier: b38c2a43-c4fd-4520-8cfe-28168a0a2a28
+is_enable: true
+version: 0.0
+name: GCP Storage Compliance Audit
+description: Audits GCP buckets via GoogleCloudApi Execute HTTP Request (buckets.list,
+    buckets.get, buckets.getIamPolicy). Evaluates public ACLs, CMEK encryption, versioning,
+    access logging, and retention/Bucket Lock. Posts structured compliance report
+    to case wall. Covers Attack Surface Management and compliance gaps not addressed
+    by existing Content Hub blocks.
+debug_alert_identifier: GCP AUDITA3DB2DBC-C6DC-4183-8FB7-745632A6368A
+debug_base_alert_identifier: GCP AUDIT_97E0685E-ADEC-42DF-ACDB-513E2C4725EB
+is_debug_mode: false
+type: block
+template_name: null
+original_workflow_identifier: 4a563cf3-303d-41c5-a6b3-867e03809527
+version_comment: null
+version_creator: null
+creator: 739d45dd-188d-4191-8fb4-f28e8f5a222b
+priority: 2
+category: 243
+is_automatic: true
+is_archived: false
+last_editor: null
+default_access_level: edit
+creation_source: user_or_api_initiated
+simulation_clone: false
+permissions: []
+environments:
+- '*'
diff --git a/content/playbooks/third_party/community/gcp_storage_compliance_audit/display_info.yaml b/content/playbooks/third_party/community/gcp_storage_compliance_audit/display_info.yaml
@@ -0,0 +1,8 @@
+type: block
+content_hub_display_name: 'GCP Storage Compliance Audit'
+author: 'Accenture'
+contact_email: '' # In case support is needed, this email will be used by secops customers to open support queries (required for partner contributed content)
+tags: ['GCP', 'compliance', 'audit']
+should_display_in_content_hub: true
+contribution_type: third_party # Options: google, partner, or third_party
+acknowledge_debug_data_included: true
diff --git a/content/playbooks/third_party/community/gcp_storage_compliance_audit/overviews.yaml b/content/playbooks/third_party/community/gcp_storage_compliance_audit/overviews.yaml
@@ -0,0 +1 @@
+[]
diff --git a/content/playbooks/third_party/community/gcp_storage_compliance_audit/release_notes.yaml b/content/playbooks/third_party/community/gcp_storage_compliance_audit/release_notes.yaml
@@ -0,0 +1,9 @@
+-   description: Initial release of GCP Storage Compliance Audit
+    integration_version: 1.0
+    item_name: GCP Storage Compliance Audit
+    item_type: Block
+    publish_time: '2026-08-31'
+    new: true
+    regressive: false
+    deprecated: false
+    removed: false
diff --git a/.../third_party/community/gcp_storage_compliance_audit/steps/access_logging_check_31dac.yaml b/.../third_party/community/gcp_storage_compliance_audit/steps/access_logging_check_31dac.yaml
@@ -0,0 +1,65 @@
+name: Condition
+description: This condition determines the progress of the playbook. Conditions are
+    built based on cases data (cases, alerts, vents, entities and environment properties)
+    as-well as data that comes back from previous playbook steps.
+identifier: 31dacdac-9f39-469b-92e7-20e1d54fda9c
+original_step_id: 159ef4f7-0bc5-44ef-8afd-85927ac1b0f5
+playbook_id: b38c2a43-c4fd-4520-8cfe-28168a0a2a28
+parent_step_ids:
+- 3ffb8e47-feef-495f-99fa-4c3dd05f19e7
+- 57f540a8-2241-491c-ac80-5df3f30eb7da
+parent_step_id: 3ffb8e47-feef-495f-99fa-4c3dd05f19e7;57f540a8-2241-491c-ac80-5df3f30eb7da
+instance_name: Access logging check
+is_automatic: true
+is_skippable: false
+action_provider: Flow
+start_loop_step_id: 9aa314ad-38a1-4173-a683-1401004c9e76
+parameters:
+-   step_id: 31dacdac-9f39-469b-92e7-20e1d54fda9c
+    playbook_id: b38c2a43-c4fd-4520-8cfe-28168a0a2a28
+    name: AssignedUsers
+    value: null
+-   step_id: 31dacdac-9f39-469b-92e7-20e1d54fda9c
+    playbook_id: b38c2a43-c4fd-4520-8cfe-28168a0a2a28
+    name: Branches
+    value: '[{"LogicalOperator":1,"Conditions":[{"Operator":7,"FieldName":"[Retrieve
+        Bucket Config.JsonResult| \"response_data.logging.logBucket\"]\n","Type":7,"Value":"","CustomOperatorName":"Core
+        Functions.Empty"}],"Order":1,"IsDefaultBranch":false,"Name":"Not Compliant"},{"LogicalOperator":0,"Conditions":[],"Order":2,"IsDefaultBranch":true,"Name":"Branch"}]'
+-   step_id: 31dacdac-9f39-469b-92e7-20e1d54fda9c
+    playbook_id: b38c2a43-c4fd-4520-8cfe-28168a0a2a28
+    name: DistinctDuplicateEntities
+    value: 'true'
+-   step_id: 31dacdac-9f39-469b-92e7-20e1d54fda9c
+    playbook_id: b38c2a43-c4fd-4520-8cfe-28168a0a2a28
+    name: ErrorFallbackBranch
+    value: null
+-   step_id: 31dacdac-9f39-469b-92e7-20e1d54fda9c
+    playbook_id: b38c2a43-c4fd-4520-8cfe-28168a0a2a28
+    name: HasApprovalLink
+    value: 'false'
+-   step_id: 31dacdac-9f39-469b-92e7-20e1d54fda9c
+    playbook_id: b38c2a43-c4fd-4520-8cfe-28168a0a2a28
+    name: MessageToAssignee
+    value: null
+-   step_id: 31dacdac-9f39-469b-92e7-20e1d54fda9c
+    playbook_id: b38c2a43-c4fd-4520-8cfe-28168a0a2a28
+    name: PendingActionTimeout
+    value: null
+-   step_id: 31dacdac-9f39-469b-92e7-20e1d54fda9c
+    playbook_id: b38c2a43-c4fd-4520-8cfe-28168a0a2a28
+    name: SelectedScopeName
+    value: All entities
+-   step_id: 31dacdac-9f39-469b-92e7-20e1d54fda9c
+    playbook_id: b38c2a43-c4fd-4520-8cfe-28168a0a2a28
+    name: UseEntitiesLoopScope
+    value: 'true'
+action_name: IfFlowCondition
+parallel_actions: []
+integration: Flow
+parent_container_id: null
+is_touched_by_ai: false
+is_debug_mock_data: false
+step_debug_data: null
+auto_skip_on_failure: false
+previous_result_condition: '{}'
+type: condition
diff --git a/...laybooks/third_party/community/gcp_storage_compliance_audit/steps/action_error_63557.yaml b/...laybooks/third_party/community/gcp_storage_compliance_audit/steps/action_error_63557.yaml
@@ -0,0 +1,89 @@
+name: Siemplify_Case Comment
+description: Action failed
+identifier: 63557d4a-70c9-430a-ae27-77f4f7011dd5
+original_step_id: d0a5d762-3388-4a43-800c-8367e38e48d1
+playbook_id: b38c2a43-c4fd-4520-8cfe-28168a0a2a28
+parent_step_ids:
+- 951e9d68-3531-4797-a4e0-f96940041e02
+parent_step_id: 951e9d68-3531-4797-a4e0-f96940041e02
+instance_name: Action Error
+is_automatic: true
+is_skippable: false
+action_provider: Scripts
+start_loop_step_id: null
+parameters:
+-   step_id: 63557d4a-70c9-430a-ae27-77f4f7011dd5
+    playbook_id: b38c2a43-c4fd-4520-8cfe-28168a0a2a28
+    name: AssignedUsers
+    value: null
+-   step_id: 63557d4a-70c9-430a-ae27-77f4f7011dd5
+    playbook_id: b38c2a43-c4fd-4520-8cfe-28168a0a2a28
+    name: DistinctDuplicateEntities
+    value: null
+-   step_id: 63557d4a-70c9-430a-ae27-77f4f7011dd5
+    playbook_id: b38c2a43-c4fd-4520-8cfe-28168a0a2a28
+    name: DynamicInjectionInstancePlaceholder
+    value: ''
+-   step_id: 63557d4a-70c9-430a-ae27-77f4f7011dd5
+    playbook_id: b38c2a43-c4fd-4520-8cfe-28168a0a2a28
+    name: FallbackIntegrationInstance
+    value: null
+-   step_id: 63557d4a-70c9-430a-ae27-77f4f7011dd5
+    playbook_id: b38c2a43-c4fd-4520-8cfe-28168a0a2a28
+    name: FetchInstanceByName
+    value: 'false'
+-   step_id: 63557d4a-70c9-430a-ae27-77f4f7011dd5
+    playbook_id: b38c2a43-c4fd-4520-8cfe-28168a0a2a28
+    name: HasApprovalLink
+    value: null
+-   step_id: 63557d4a-70c9-430a-ae27-77f4f7011dd5
+    playbook_id: b38c2a43-c4fd-4520-8cfe-28168a0a2a28
+    name: IntegrationInstance
+    value: a4e2b09e-9972-4a54-b726-7fc459c31ba5
+-   step_id: 63557d4a-70c9-430a-ae27-77f4f7011dd5
+    playbook_id: b38c2a43-c4fd-4520-8cfe-28168a0a2a28
+    name: MessageToAssignee
+    value: null
+-   step_id: 63557d4a-70c9-430a-ae27-77f4f7011dd5
+    playbook_id: b38c2a43-c4fd-4520-8cfe-28168a0a2a28
+    name: PendingActionTimeout
+    value: null
+-   step_id: 63557d4a-70c9-430a-ae27-77f4f7011dd5
+    playbook_id: b38c2a43-c4fd-4520-8cfe-28168a0a2a28
+    name: RetryConfiguration
+    value: '{"Enabled":false,"IntervalInSeconds":30,"NumberOfRetries":1}'
+-   step_id: 63557d4a-70c9-430a-ae27-77f4f7011dd5
+    playbook_id: b38c2a43-c4fd-4520-8cfe-28168a0a2a28
+    name: ScriptName
+    value: Siemplify_Case Comment
+-   step_id: 63557d4a-70c9-430a-ae27-77f4f7011dd5
+    playbook_id: b38c2a43-c4fd-4520-8cfe-28168a0a2a28
+    name: ScriptParametersEntityFields
+    value: '{"Comment":"Action Failed: Unable to retrieve the bucket list due to the
+        following error:\n[Retrieve Bucket List.JsonResult | \"response_data.error.message\"]"}'
+-   step_id: 63557d4a-70c9-430a-ae27-77f4f7011dd5
+    playbook_id: b38c2a43-c4fd-4520-8cfe-28168a0a2a28
+    name: SelectedScopeName
+    value: All entities
+-   step_id: 63557d4a-70c9-430a-ae27-77f4f7011dd5
+    playbook_id: b38c2a43-c4fd-4520-8cfe-28168a0a2a28
+    name: UseEntitiesLoopScope
+    value: null
+action_name: Siemplify_Case Comment
+parallel_actions: []
+integration: Siemplify
+parent_container_id: null
+is_touched_by_ai: false
+is_debug_mock_data: false
+step_debug_data:
+    step_id: d0a5d762-3388-4a43-800c-8367e38e48d1
+    playbook_id: 4a563cf3-303d-41c5-a6b3-867e03809527
+    creation_time: 0
+    modification_time: 0
+    result_value: ''
+    result_json: ''
+    scope_entities_enrichment_data: []
+auto_skip_on_failure: false
+previous_result_condition: "{\n  \"951e9d68-3531-4797-a4e0-f96940041e02\": \"2\"\n\
+    }"
+type: action
diff --git a/...d_party/community/gcp_storage_compliance_audit/steps/bucket_compliance_context_3bfb5.yaml b/...d_party/community/gcp_storage_compliance_audit/steps/bucket_compliance_context_3bfb5.yaml
@@ -0,0 +1,106 @@
+name: Tools_Append to Context Value
+description: Formats the Bucket Compliance Status and PASS and FAIL results in a HTML
+    Table (per iteration)
+identifier: 3bfb504c-0994-4204-b90c-5e489f9fd98f
+original_step_id: 32c9a71b-b6d1-46c8-b648-2c201fedc3e5
+playbook_id: b38c2a43-c4fd-4520-8cfe-28168a0a2a28
+parent_step_ids:
+- 9e1eae55-a353-414e-83f5-d179b735d1cb
+- 0faf154b-dd00-4e1d-a8f6-03114847380a
+- a362245d-955b-4946-93a3-1d6177efb6f4
+parent_step_id: 9e1eae55-a353-414e-83f5-d179b735d1cb;0faf154b-dd00-4e1d-a8f6-03114847380a;a362245d-955b-4946-93a3-1d6177efb6f4
+instance_name: Bucket Compliance Context
+is_automatic: true
+is_skippable: false
+action_provider: Scripts
+start_loop_step_id: 9aa314ad-38a1-4173-a683-1401004c9e76
+parameters:
+-   step_id: 3bfb504c-0994-4204-b90c-5e489f9fd98f
+    playbook_id: b38c2a43-c4fd-4520-8cfe-28168a0a2a28
+    name: AssignedUsers
+    value: null
+-   step_id: 3bfb504c-0994-4204-b90c-5e489f9fd98f
+    playbook_id: b38c2a43-c4fd-4520-8cfe-28168a0a2a28
+    name: DistinctDuplicateEntities
+    value: null
+-   step_id: 3bfb504c-0994-4204-b90c-5e489f9fd98f
+    playbook_id: b38c2a43-c4fd-4520-8cfe-28168a0a2a28
+    name: DynamicInjectionInstancePlaceholder
+    value: ''
+-   step_id: 3bfb504c-0994-4204-b90c-5e489f9fd98f
+    playbook_id: b38c2a43-c4fd-4520-8cfe-28168a0a2a28
+    name: FallbackIntegrationInstance
+    value: null
+-   step_id: 3bfb504c-0994-4204-b90c-5e489f9fd98f
+    playbook_id: b38c2a43-c4fd-4520-8cfe-28168a0a2a28
+    name: FetchInstanceByName
+    value: 'false'
+-   step_id: 3bfb504c-0994-4204-b90c-5e489f9fd98f
+    playbook_id: b38c2a43-c4fd-4520-8cfe-28168a0a2a28
+    name: HasApprovalLink
+    value: null
+-   step_id: 3bfb504c-0994-4204-b90c-5e489f9fd98f
+    playbook_id: b38c2a43-c4fd-4520-8cfe-28168a0a2a28
+    name: IntegrationInstance
+    value: 4b41988d-9fb1-4a11-b3e5-18f17c87bc84
+-   step_id: 3bfb504c-0994-4204-b90c-5e489f9fd98f
+    playbook_id: b38c2a43-c4fd-4520-8cfe-28168a0a2a28
+    name: MessageToAssignee
+    value: null
+-   step_id: 3bfb504c-0994-4204-b90c-5e489f9fd98f
+    playbook_id: b38c2a43-c4fd-4520-8cfe-28168a0a2a28
+    name: PendingActionTimeout
+    value: null
+-   step_id: 3bfb504c-0994-4204-b90c-5e489f9fd98f
+    playbook_id: b38c2a43-c4fd-4520-8cfe-28168a0a2a28
+    name: RetryConfiguration
+    value: '{"Enabled":false,"IntervalInSeconds":30,"NumberOfRetries":1}'
+-   step_id: 3bfb504c-0994-4204-b90c-5e489f9fd98f
+    playbook_id: b38c2a43-c4fd-4520-8cfe-28168a0a2a28
+    name: ScriptName
+    value: Tools_Append to Context Value
+-   step_id: 3bfb504c-0994-4204-b90c-5e489f9fd98f
+    playbook_id: b38c2a43-c4fd-4520-8cfe-28168a0a2a28
+    name: ScriptParametersEntityFields
+    value: '{"Scope":"Alert","Key":"bucket_overall_status","Value":"<div class=\"cs-bucket-card\"><div
+        class=\"cs-card-header\"><span class=\"cs-bucket-index\">Bucket [Loop.Index]</span><span
+        class=\"cs-bucket-name\">[Loop.Item]</span><span class=\"cs-status-badge\"
+        data-status=\"[Alert.bucket_compliance]\">[Alert.bucket_compliance]</span></div><div
+        class=\"cs-card-body\"><div class=\"cs-checks\"><div class=\"cs-check\"><span
+        class=\"cs-check-label\">Public Access</span><span class=\"cs-check-value\"
+        data-status=\"[Alert.flag_public_access]\"><span class=\"cs-dot\"></span>[Alert.flag_public_access]</span></div><div
+        class=\"cs-check\"><span class=\"cs-check-label\">CMEK</span><span class=\"cs-check-value\"
+        data-status=\"[Alert.flag_cmek]\"><span class=\"cs-dot\"></span>[Alert.flag_cmek]</span></div><div
+        class=\"cs-check\"><span class=\"cs-check-label\">Versioning</span><span class=\"cs-check-value\"
+        data-status=\"[Alert.flag_versioning]\"><span class=\"cs-dot\"></span>[Alert.flag_versioning]</span></div><div
+        class=\"cs-check\"><span class=\"cs-check-label\">Logging</span><span class=\"cs-check-value\"
+        data-status=\"[Alert.flag_logging]\"><span class=\"cs-dot\"></span>[Alert.flag_logging]</span></div><div
+        class=\"cs-check\"><span class=\"cs-check-label\">Retention</span><span class=\"cs-check-value\"
+        data-status=\"[Alert.flag_retention]\"><span class=\"cs-dot\"></span>[Alert.flag_retention]</span></div><div
+        class=\"cs-check\"><span class=\"cs-check-label\">Compliance</span><span class=\"cs-check-value\"
+        data-status=\"[Alert.bucket_compliance_message]\"><span class=\"cs-dot\"></span>[Alert.bucket_compliance_message]</span></div></div></div></div></div>","Delimiter":"<div>"}'
+-   step_id: 3bfb504c-0994-4204-b90c-5e489f9fd98f
+    playbook_id: b38c2a43-c4fd-4520-8cfe-28168a0a2a28
+    name: SelectedScopeName
+    value: All entities
+-   step_id: 3bfb504c-0994-4204-b90c-5e489f9fd98f
+    playbook_id: b38c2a43-c4fd-4520-8cfe-28168a0a2a28
+    name: UseEntitiesLoopScope
+    value: 'true'
+action_name: Tools_Append to Context Value
+parallel_actions: []
+integration: Tools
+parent_container_id: null
+is_touched_by_ai: false
+is_debug_mock_data: false
+step_debug_data:
+    step_id: 32c9a71b-b6d1-46c8-b648-2c201fedc3e5
+    playbook_id: 4a563cf3-303d-41c5-a6b3-867e03809527
+    creation_time: 0
+    modification_time: 0
+    result_value: ''
+    result_json: ''
+    scope_entities_enrichment_data: []
+auto_skip_on_failure: false
+previous_result_condition: '{}'
+type: action
diff --git a/...laybooks/third_party/community/gcp_storage_compliance_audit/steps/bucket_found_951e9.yaml b/...laybooks/third_party/community/gcp_storage_compliance_audit/steps/bucket_found_951e9.yaml
@@ -0,0 +1,65 @@
+name: Condition
+description: Is there a bucket name(s) found? Does the API Action succeed?
+identifier: 951e9d68-3531-4797-a4e0-f96940041e02
+original_step_id: a7758e29-a87d-4b9d-b341-d6377f257fee
+playbook_id: b38c2a43-c4fd-4520-8cfe-28168a0a2a28
+parent_step_ids:
+- c841ee14-8b54-441e-b253-0f1e7a19f31f
+parent_step_id: c841ee14-8b54-441e-b253-0f1e7a19f31f
+instance_name: Bucket Found?
+is_automatic: true
+is_skippable: false
+action_provider: Flow
+start_loop_step_id: null
+parameters:
+-   step_id: 951e9d68-3531-4797-a4e0-f96940041e02
+    playbook_id: b38c2a43-c4fd-4520-8cfe-28168a0a2a28
+    name: AssignedUsers
+    value: null
+-   step_id: 951e9d68-3531-4797-a4e0-f96940041e02
+    playbook_id: b38c2a43-c4fd-4520-8cfe-28168a0a2a28
+    name: Branches
+    value: '[{"LogicalOperator":0,"Conditions":[{"Operator":7,"FieldName":"[Retrieve
+        Bucket List.JsonResult| \"response_data.items.name\"]","Type":7,"Value":"","CustomOperatorName":"Core
+        Functions.Empty"},{"Operator":0,"FieldName":"[Retrieve Bucket List.is_success]","Type":7,"Value":"true","CustomOperatorName":"Core
+        Functions.Equal"}],"Order":1,"IsDefaultBranch":false,"Name":"No Buckets Found"},{"LogicalOperator":0,"Conditions":[],"Order":3,"IsDefaultBranch":true,"Name":"Branch"},{"LogicalOperator":0,"Conditions":[{"Operator":0,"FieldName":"[Retrieve
+        Bucket List.is_success]","Type":7,"Value":"false","CustomOperatorName":"Core
+        Functions.Equal"}],"Order":2,"IsDefaultBranch":false,"Name":"Project ID Error"}]'
+-   step_id: 951e9d68-3531-4797-a4e0-f96940041e02
+    playbook_id: b38c2a43-c4fd-4520-8cfe-28168a0a2a28
+    name: DistinctDuplicateEntities
+    value: 'true'
+-   step_id: 951e9d68-3531-4797-a4e0-f96940041e02
+    playbook_id: b38c2a43-c4fd-4520-8cfe-28168a0a2a28
+    name: ErrorFallbackBranch
+    value: null
+-   step_id: 951e9d68-3531-4797-a4e0-f96940041e02
+    playbook_id: b38c2a43-c4fd-4520-8cfe-28168a0a2a28
+    name: HasApprovalLink
+    value: null
+-   step_id: 951e9d68-3531-4797-a4e0-f96940041e02
+    playbook_id: b38c2a43-c4fd-4520-8cfe-28168a0a2a28
+    name: MessageToAssignee
+    value: null
+-   step_id: 951e9d68-3531-4797-a4e0-f96940041e02
+    playbook_id: b38c2a43-c4fd-4520-8cfe-28168a0a2a28
+    name: PendingActionTimeout
+    value: null
+-   step_id: 951e9d68-3531-4797-a4e0-f96940041e02
+    playbook_id: b38c2a43-c4fd-4520-8cfe-28168a0a2a28
+    name: SelectedScopeName
+    value: All entities
+-   step_id: 951e9d68-3531-4797-a4e0-f96940041e02
+    playbook_id: b38c2a43-c4fd-4520-8cfe-28168a0a2a28
+    name: UseEntitiesLoopScope
+    value: 'true'
+action_name: IfFlowCondition
+parallel_actions: []
+integration: Flow
+parent_container_id: null
+is_touched_by_ai: false
+is_debug_mock_data: false
+step_debug_data: null
+auto_skip_on_failure: false
+previous_result_condition: '{}'
+type: condition