Control: GCP > CIS v1 > 3 Networking

Primary Policies

The following policies can be used to configure this control:

• 3 Networking > 3.01 Ensure the default network does not exist in a project (Scored)
• 3 Networking > 3.02 Ensure legacy networks does not exists for a project (Scored)
• 3 Networking > 3.03 Ensure that DNSSEC is enabled for Cloud DNS (Not Scored)
• 3 Networking > 3.04 Ensure that RSASHA1 is not used for key-signing key in Cloud DNS DNSSEC (Not Scored)
• 3 Networking > 3.05 Ensure that RSASHA1 is not used for zone-signing key in Cloud DNS DNSSEC (Not Scored)
• 3 Networking > 3.06 Ensure that SSH access is restricted from the internet (Scored)
• 3 Networking > 3.07 Ensure that RDP access is restricted from the internet (Scored)
• 3 Networking > 3.08 Ensure Private Google Access is enabled for all subnetwork in VPC Network (Scored)
• 3 Networking > 3.09 Ensure VPC Flow logs is enabled for every subnet in VPC Network (Scored)
• 3 Networking

Category

• CIS

In Your Workspace

• Controls by Resource report
• Controls by Control Type report

Developers

Control Type URI

tmod:@turbot/gcp-cisv1#/control/types/s03

Category URI

tmod:@turbot/cis#/control/categories/cis

GraphQL

query controlType(id: "tmod:@turbot/gcp-cisv1#/control/types/s03") { … }

query controls(filter: "controlTypeId:'tmod:@turbot/gcp-cisv1#/control/types/s03'") { … }

CLI

Get Controls

turbot graphql controls --filter "controlTypeId:tmod:@turbot/gcp-cisv1#/control/types/s03"