Policy: GCP > CIS v3.0 > 4 - Virtual Machines > Maximum Attestation Duration

The maximum duration for CIS Attestations. Attestation policies can not be set further in the future than is specified here.

Targets

This policy targets the following resource types:

This policy is used with the following primary policy:

Setting this policy configures these controls:

Schema Type	`string`
Default	`Per GCP > CIS v3.0 > Maximum Attestation Duration`
Valid Values [YAML]	`Per GCP > CIS v3.0 > Maximum Attestation Duration` `Skip` `30 days` `60 days` `90 days` `1 year` `2 years` `3 years`

Category URI

tmod:@turbot/cis#/control/categories/cis

Policy Type URI

tmod:@turbot/gcp-cisv3-0#/policy/types/s04Attestation

GraphQL

query policyType(id: "tmod:@turbot/gcp-cisv3-0#/policy/types/s04Attestation") { … }

query policySettings(filter: "policyTypeId:'tmod:@turbot/gcp-cisv3-0#/policy/types/s04Attestation'") { … }

query policyValues(filter: "policyTypeId:'tmod:@turbot/gcp-cisv3-0#/policy/types/s04Attestation'") { … }

CLI

Get Policy Type

turbot graphql policy-type --id "tmod:@turbot/gcp-cisv3-0#/policy/types/s04Attestation"

Get Policy Settings

turbot graphql policy-settings --filter "policyTypeId:tmod:@turbot/gcp-cisv3-0#/policy/types/s04Attestation"