Control: GCP > CIS v2.0 > 3 - Networking

Primary Policies

The following policies can be used to configure this control:

• 3 - Networking > 3.01 - Ensure That the Default Network Does Not Exist in a Project
• 3 - Networking > 3.02 - Ensure Legacy Networks Do Not Exist for Older Projects
• 3 - Networking > 3.03 - Ensure That DNSSEC Is Enabled for Cloud DNS
• 3 - Networking > 3.04 - Ensure That RSASHA1 Is Not Used for the Key-Signing Key in Cloud DNS DNSSEC
• 3 - Networking > 3.05 - Ensure That RSASHA1 Is Not Used for the Zone-Signing Key in Cloud DNS DNSSEC
• 3 - Networking > 3.06 - Ensure That SSH Access Is Restricted From the Internet
• 3 - Networking > 3.07 - Ensure That RDP Access Is Restricted From the Internet
• 3 - Networking > 3.08 - Ensure that VPC Flow Logs is Enabled for Every Subnet in a VPC Network
• 3 - Networking > 3.09 - Ensure No HTTPS or SSL Proxy Load Balancers Permit SSL Policies With Weak Cipher Suites
• 3 - Networking > 3.10 - Use Identity Aware Proxy (IAP) to Ensure Only Traffic From Google IP Addresses are 'Allowed'
• 3 - Networking

Category

• CIS

In Your Workspace

• Controls by Resource report
• Controls by Control Type report

Developers

Control Type URI

tmod:@turbot/gcp-cisv2-0#/control/types/s03

Category URI

tmod:@turbot/cis#/control/categories/cis

GraphQL

query controlType(id: "tmod:@turbot/gcp-cisv2-0#/control/types/s03") { … }

query controls(filter: "controlTypeId:'tmod:@turbot/gcp-cisv2-0#/control/types/s03'") { … }

CLI

Get Controls

turbot graphql controls --filter "controlTypeId:tmod:@turbot/gcp-cisv2-0#/control/types/s03"