Policy Settings
The GCP CIS v2.0.0 - Section 2 - Logging and Monitoring policy pack has 15 policy settings:
| Policy | Setting | Note |
|---|---|---|
| GCP > DNS > Policy > Logging | Check: Enabled | GCP CIS v2.0.0 - Control: 2.12 |
| GCP > Network > Backend Service > Logging | Check: Enabled | GCP CIS v2.0.0 - Control: 2.16 |
| GCP > Network > Backend Service > Logging > Sample Rate | 1 | GCP CIS v2.0.0 - Control: 2.16 |
| GCP > Project > Stack | Check: Configured | GCP CIS v2.0.0 - Controls: 2.4, 2.5, 2.6, 2.7, 2.8, 2.9, 2.10 and 2.11 |
| GCP > Project > Stack > Source | Calculated | GCP CIS v2.0.0 - Controls: 2.4, 2.5, 2.6, 2.7, 2.8, 2.9, 2.10 and 2.11 |
| GCP > Project > Stack > Terraform Version | 0.15.* | GCP CIS v2.0.0 - Controls: 2.4, 2.5, 2.6, 2.7, 2.8, 2.9, 2.10 and 2.11 |
| GCP > Storage > Bucket > Approved | Check: Approved | GCP CIS v2.0.0 - Control: 2.3 |
| GCP > Storage > Bucket > Approved > Custom | Calculated | GCP CIS v2.0.0 - Control: 2.3 |
| GCP > Turbot > Event Handlers > Logging | Check: Configured | GCP CIS v2.0.0 - Control: 2.1 |
| GCP > Turbot > Event Handlers > Logging > Sink > Destination Topic | pubsub.googleapis.com/projects/myProjectId/topics/myTopicId | GCP CIS v2.0.0 - Control: 2.1 |
| GCP > Turbot > Event Handlers > Logging > Sink > Name Prefix | myLoggingSinkNamePrefix | GCP CIS v2.0.0 - Control: 2.1 |
| GCP > Turbot > Event Handlers > Logging > Unique Writer Identity | Enforce: Default Service Account | GCP CIS v2.0.0 - Control: 2.1 |
| GCP > Turbot > Event Handlers > Pub/Sub | Check: Configured | GCP CIS v2.0.0 - Control: 2.2 |
| GCP > Turbot > Event Handlers > Pub/Sub > Subscription > Name Prefix | myPubSubSubscriptionNamePrefix | GCP CIS v2.0.0 - Control: 2.2 |
| GCP > Turbot > Event Handlers > Pub/Sub > Topic > Name Prefix | myPubSubTopicNamePrefix | GCP CIS v2.0.0 - Control: 2.2 |