services / Google Cloud / Cloud Logging Settings

Settings for cloud logging, including locations for log storage, disabled _Default sinks, and encryption keys.

logging.​settings.​update

Disabling the _Default log sink can cause loss of log entry data.

Risks

1. Data encryption (CRITICAL)
2. Logs destruction (EVASION)

Scope: MEDIUM

This privilege may grant access to confidential data, or its exploit can incur operational cost.

Links