services / Google Cloud / BigQuery datasets

Datasets in BigQuery are a primary unit of organizing and controlling access to data. They are analogous to schemata in relational data systems.

BigQuery can potentially store sensitive information from across an organization's functions.

bigquery.​datasets.​deleteTagBinding

A common use case of tag bindings is for use in IAM policy conditions. The risks apply if the tag is used in any policies.

Risks

1. Policy destruction (CRITICAL)
2. Privilege escalation (CRITICAL)
3. Denial-of-access (EVASION)

Scope: CRITICAL

This privilege may grant access to sensitive data from a significant fraction of organizational functions, allow interruption of critical organizational services, or its exploit could lead to significant privilege escalation.

Links