Control: GCP > CIS v3.0 > 2 - Logging and Monitoring > 2.14 - Ensure 'Access Transparency' is 'Enabled'

Configures auditing against a CIS Benchmark item.

Level: 2

GCP Access Transparency provides audit logs for all actions that Google personnel take in your Google Cloud resources.

Resource Types

This control targets the following resource types:

GCP > Project

Policies

This control type relies on these other policies when running actions:

GCP > CIS v3.0 > Maximum Attestation Duration
GCP > CIS v3.0
GCP > CIS v3.0 > 2 - Logging and Monitoring > 2.14 - Ensure 'Access Transparency' is 'Enabled'
GCP > CIS v3.0 > 2 - Logging and Monitoring > 2.14 - Ensure 'Access Transparency' is 'Enabled' > Attestation
GCP > CIS v3.0 > 2 - Logging and Monitoring
GCP > CIS v3.0 > 2 - Logging and Monitoring > Maximum Attestation Duration

In Your Workspace

Controls by Resource report
Controls by Control Type report

Developers

Control Type URI

tmod:@turbot/gcp-cisv3-0#/control/types/r0214

Category URI

tmod:@turbot/cis#/control/categories/v070603

GraphQL

query controlType(id: "tmod:@turbot/gcp-cisv3-0#/control/types/r0214") { … }

query controls(filter: "controlTypeId:'tmod:@turbot/gcp-cisv3-0#/control/types/r0214'") { … }

CLI

Get Controls

turbot graphql controls --filter "controlTypeId:tmod:@turbot/gcp-cisv3-0#/control/types/r0214"