Turbot Guardrails Hub 
Hub
  • Mods
  • Policy Packs
  • Docs
  • Home
ModsPolicy PacksDocsHome
Mods
GCP
Loading policies...

Policy: GCP > CIS v5.0 > 3 - Networking > 3.08 - Ensure VPC Service Controls Is Enabled for Supported Google Cloud Services

Configures auditing against a CIS Benchmark item.

Level: 2

Ensure that VPC Service Controls are configured to create security perimeters around sensitive Google Cloud resources, preventing unauthorized data exfiltration and limiting access to resources from approved networks and identities. VPC Service Controls provide an additional layer of defense-in-depth by allowing organizations to define trust boundaries around GCP services and control data movement across those boundaries.

Targets

This policy targets the following resource types:

  • GCP > Project

Primary Policy

This policy is used with the following primary policy:

  • GCP > CIS v5.0 > 3 - Networking

Related Policies

  • Attestation

Controls

Setting this policy configures this control:

  • GCP > CIS v5.0 > 3 - Networking > 3.08 - Ensure VPC Service Controls Is Enabled for Supported Google Cloud Services

Policy Specification

Schema Type
string
Default
Per GCP > CIS v5.0 > 3 - Networking
Valid Values [YAML]
  • Per GCP > CIS v5.0 > 3 - Networking

  • Skip

  • Check: Benchmark using attestation

Category

  • CIS > Controls v7 > 14 Controlled Access Based on the Need to Know > 14.01 Segment the Network Based on Sensitivity

In Your Workspace

  • Policy Settings by Type report

Developers

    Category URI
    • tmod:@turbot/cis#/control/categories/v071401
    • Policy Type URI
    • tmod:@turbot/gcp-cisv5-0#/policy/types/r0308
    • GraphQL
    • query policyType(id: "tmod:@turbot/gcp-cisv5-0#/policy/types/r0308") { … }
    • query policySettings(filter: "policyTypeId:'tmod:@turbot/gcp-cisv5-0#/policy/types/r0308'") { … }
    • query policyValues(filter: "policyTypeId:'tmod:@turbot/gcp-cisv5-0#/policy/types/r0308'") { … }
    • CLI
    • Get Policy Type
    • turbot graphql policy-type --id "tmod:@turbot/gcp-cisv5-0#/policy/types/r0308"
      • Get Policy Settings
    • turbot graphql policy-settings --filter "policyTypeId:tmod:@turbot/gcp-cisv5-0#/policy/types/r0308"
Guardrails
Guardrails Hub
  • Hub
  • Docs
  • Blog
  • Changelog
Products
  • GuardrailsGuardrails
  • PipesPipes
  • SteampipeSteampipe
  • PowerpipePowerpipe
  • FlowpipeFlowpipe
  • TailpipeTailpipe
Turbot
  • Home
  • About us
  • We're hiring!
  • Contact us
Community

Our community of practitioners love to discuss cloud governance & security.

Slack logoJoin us on Slack →

System StatusLegalSecurity
Terms of UseSecurityPrivacy
42
Mods
158
Resource Types
2,654
Policies
1,319
Controls
131
Quick Actions
93
IAM