Skip to main content

💼 3.10 Ensure Firewall Rules for instances behind Identity Aware Proxy (IAP) only allow the traffic from Google Cloud Loadbalancer (GCLB) Health Check and Proxy Addresses - Level 2 (Manual | Not supported, requires a manual assessment)

  • Contextual name: 💼 3.10 Ensure Firewall Rules for instances behind Identity Aware Proxy (IAP) only allow the traffic from Google Cloud Loadbalancer (GCLB) Health Check and Proxy Addresses - Level 2 (Manual | Not supported, requires a manual assessment)
  • ID: /frameworks/cis-gcp-v1.2.0/03/10
  • Located in: 💼 3 Networking

Description​

Access to VMs should be restricted by firewall rules that allow only IAP traffic by ensuring only connections proxied by the IAP are allowed. To ensure that load balancing works correctly health checks should also be allowed.

Similar​

  • Internal
    • ID: dec-c-5f856141

Sub Sections​

SectionSub SectionsInternal RulesPoliciesFlags