Control: GCP > CIS v5.0 > 3 - Networking > 3.08 - Ensure VPC Service Controls Is Enabled for Supported Google Cloud Services

Configures auditing against a CIS Benchmark item.

Level: 2

Ensure that VPC Service Controls are configured to create security perimeters around sensitive Google Cloud resources, preventing unauthorized data exfiltration and limiting access to resources from approved networks and identities. VPC Service Controls provide an additional layer of defense-in-depth by allowing organizations to define trust boundaries around GCP services and control data movement across those boundaries.

Resource Types

This control targets the following resource types:

GCP > Project

Policies

This control type relies on these other policies when running actions:

In Your Workspace

Developers

Control Type URI

tmod:@turbot/gcp-cisv5-0#/control/types/r0308

Category URI

tmod:@turbot/cis#/control/categories/v071401

GraphQL

query controlType(id: "tmod:@turbot/gcp-cisv5-0#/control/types/r0308") { … }

query controls(filter: "controlTypeId:'tmod:@turbot/gcp-cisv5-0#/control/types/r0308'") { … }

CLI

Get Controls

turbot graphql controls --filter "controlTypeId:tmod:@turbot/gcp-cisv5-0#/control/types/r0308"