Module 3 challenge — Question 6

What is the first step while investigating an unauthorized access to a Google Cloud Storage bucket?