Control: GCP > CIS v2.0 > 3 - Networking > 3.03 - Ensure That DNSSEC Is Enabled for Cloud DNS

Configures auditing against a CIS Benchmark item.

Level: 1

Cloud Domain Name System (DNS) is a fast, reliable and cost-effective domain name system that powers millions of domains on the internet. Domain Name System Security Extensions (DNSSEC) in Cloud DNS enables domain owners to take easy steps to protect their domains against DNS hijacking and man-in-the-middle and other attacks.

Resource Types

This control targets the following resource types:

GCP > DNS > Managed Zone

Primary Policies

The following policies can be used to configure this control:

3.03 - Ensure That DNSSEC Is Enabled for Cloud DNS

In Your Workspace

Developers

Control Type URI

tmod:@turbot/gcp-cisv2-0#/control/types/r0303

Category URI

tmod:@turbot/cis#/control/categories/v071101

GraphQL

query controlType(id: "tmod:@turbot/gcp-cisv2-0#/control/types/r0303") { … }

query controls(filter: "controlTypeId:'tmod:@turbot/gcp-cisv2-0#/control/types/r0303'") { … }

CLI

Get Controls

turbot graphql controls --filter "controlTypeId:tmod:@turbot/gcp-cisv2-0#/control/types/r0303"