Control: GCP > CIS v4.0 > 2 - Logging and Monitoring > 2.12 - Ensure That Cloud DNS Logging Is Enabled for All VPC Networks

Configures auditing against a CIS Benchmark item.

Level: 1

Cloud DNS logging records the queries from the name servers within your VPC to Stackdriver. Logged queries can come from Compute Engine VMs, GKE containers, or other GCP resources provisioned within the VPC.

Resource Types

This control targets the following resource types:

GCP > Network > Network

Policies

This control type relies on these other policies when running actions:

In Your Workspace

Developers

Control Type URI

tmod:@turbot/gcp-cisv4-0#/control/types/r0212

Category URI

tmod:@turbot/cis#/control/categories/v070807

GraphQL

query controlType(id: "tmod:@turbot/gcp-cisv4-0#/control/types/r0212") { … }

query controls(filter: "controlTypeId:'tmod:@turbot/gcp-cisv4-0#/control/types/r0212'") { … }

CLI

Get Controls

turbot graphql controls --filter "controlTypeId:tmod:@turbot/gcp-cisv4-0#/control/types/r0212"