Tampering with cloud storage policies to allow public access

Given an authorized Google Cloud identity with the required bucket permissions, enumerate buckets in one selected project and add an IAM binding that grants roles/storage.objectViewer to allUsers on an in-scope Cloud Storage bucket. If Public Access Prevention does not block the change, this makes the bucket's objects anonymously readable from the Internet. The procedure changes access policy; it does not retrieve object contents.