Skip to content

GCP ​

TypeResourceRule nameStatus
ComputeCompute instanceCompute instance should not have a public IP address✅
Compute instance should not use the default Compute Engine service account with full API access✅
Compute instance connection through serial ports should not be enabled🚧(TBD)
Check for Publicly Shared Disk Images🚧(TBD)
Cloud FunctionGCP Function should not use Default Service Account🚧(TBD)
Publicly Accessible Functions🚧(TBD)
GCP Function using Default Service Account🚧(TBD)
GCP Function using Service Account with Basic Roles🚧(TBD)
NetworkFirewallVPC firewall rule should not allow public access✅
Cloud ArmorCloud Armor policy should not allow access from any IP address✅
Cloud Armor policy default rule action should be 'Deny'🚧(TBD)
DatabaseBigQueryBigQuery Datasets should be private🚧(TBD)
Cloud SQLCloud SQL SQL server instance should have 'external scripts enabled' flag set to 'off'🚧(TBD)
Cloud SQL database instance should not be open to the world
StorageBucketBucket anonymously or publicly accessible through IAM policy should not be allowed✅
Bucket anonymously or publicly accessible through default object ACL should not be allowed✅
Bucket anonymous and public access should not be allowed✅
ContainerArtifactRegistryCheck for Publicly Accessible Artifact Registry Repositories🚧(TBD)
SecurityCloud OrganizationPublic IP access on creating Vertex AI notebooks instances and runtimes should be disabled by an Organization Policy
KMSKMS Key should not use 'allUsers' or 'allAuthenticatedUsers' permissions🚧(TBD)
Check for Publicly Accessible Cloud KMS Keys🚧(TBD)

Released under the Apache 2.0 License.