Control: GCP > CIS v4.0 > 3 - Networking > 3.03 - Ensure That DNSSEC Is Enabled for Cloud DNS

Configures auditing against a CIS Benchmark item.

Level: 1

Cloud Domain Name System (DNS) is a fast, reliable and cost-effective domain name system that powers millions of domains on the internet. Domain Name System Security Extensions (DNSSEC) in Cloud DNS enables domain owners to take easy steps to protect their domains against DNS hijacking and man-in-the-middle and other attacks.

Resource Types

This control targets the following resource types:

GCP > DNS > Managed Zone

Policies

This control type relies on these other policies when running actions:

In Your Workspace

Developers

Control Type URI

tmod:@turbot/gcp-cisv4-0#/control/types/r0303

Category URI

tmod:@turbot/cis#/control/categories/v071101

GraphQL

query controlType(id: "tmod:@turbot/gcp-cisv4-0#/control/types/r0303") { … }

query controls(filter: "controlTypeId:'tmod:@turbot/gcp-cisv4-0#/control/types/r0303'") { … }

CLI

Get Controls

turbot graphql controls --filter "controlTypeId:tmod:@turbot/gcp-cisv4-0#/control/types/r0303"