Skip to main content

💼 4 Virtual Machines

  • Contextual name: 💼 4 Virtual Machines
  • ID: /frameworks/cis-gcp-v1.1.0/04
  • Located in: 💼 CIS GCP v1.1.0

Description​

This section covers recommendations addressing virtual machines on Google Cloud Platform.

Similar​

  • Internal
    • ID: dec-b-f196f9bf

Sub Sections​

SectionSub SectionsInternal RulesPoliciesFlags
💼 4.1 Ensure that instances are not configured to use the default service account
💼 4.2 Ensure that instances are not configured to use the default service account with full access to all Cloud APIs
💼 4.3 Ensure 'Block Project-wide SSH keys' is enabled for VM instances
💼 4.4 Ensure oslogin is enabled for a Project
💼 4.5 Ensure 'Enable connecting to serial ports' is not enabled for VM Instance
💼 4.6 Ensure that IP forwarding is not enabled on Instances
💼 4.7 Ensure VM disks for critical VMs are encrypted with Customer-Supplied Encryption Keys (CSEK)
💼 4.8 Ensure Compute instances are launched with Shielded VM enabled
💼 4.9 Ensure that Compute instances do not have public IP addresses
💼 4.10 Ensure that App Engine applications enforce HTTPS connections