Control: GCP > CIS v2.0 > 2 - Logging and Monitoring > 2.12 - Ensure That Cloud DNS Logging Is Enabled for All VPC Networks

Configures auditing against a CIS Benchmark item.

Level: 1

Cloud DNS logging records the queries from the name servers within your VPC to Stackdriver. Logged queries can come from Compute Engine VMs, GKE containers, or other GCP resources provisioned within the VPC.

Resource Types

This control targets the following resource types:

GCP > Network > Network

Primary Policies

The following policies can be used to configure this control:

2.12 - Ensure That Cloud DNS Logging Is Enabled for All VPC Networks

In Your Workspace

Developers

Control Type URI

tmod:@turbot/gcp-cisv2-0#/control/types/r0212

Category URI

tmod:@turbot/cis#/control/categories/v070807

GraphQL

query controlType(id: "tmod:@turbot/gcp-cisv2-0#/control/types/r0212") { … }

query controls(filter: "controlTypeId:'tmod:@turbot/gcp-cisv2-0#/control/types/r0212'") { … }

CLI

Get Controls

turbot graphql controls --filter "controlTypeId:tmod:@turbot/gcp-cisv2-0#/control/types/r0212"