💼 2 Logging and Monitoring

• Contextual name: 💼 2 Logging and Monitoring
• ID: /frameworks/cis-gcp-v1.3.0/02
• Located in: 💼 CIS GCP v1.3.0

Description

This section covers recommendations addressing Logging and Monitoring on Google Cloud Platform.

Similar

• Internal
  • ID: dec-b-e4acb485

Sub Sections

Section	Sub Sections	Internal Rules	Policies	Flags
💼 2.1 Ensure That Cloud Audit Logging Is Configured Properly Across All Services and All Users From a Project - Level 1 (Automated)
💼 2.2 Ensure That Sinks Are Configured for All Log Entries - Level 1 (Automated)
💼 2.3 Ensure That Retention Policies on Cloud Storage Buckets Used for Exporting Logs Are Configured Using Bucket Lock - Level 2 (Automated)
💼 2.4 Ensure Log Metric Filter and Alerts Exist for Project Ownership Assignments/Changes - Level 1 (Automated)
💼 2.5 Ensure That the Log Metric Filter and Alerts Exist for Audit Configuration Changes - Level 1 (Automated)
💼 2.6 Ensure That the Log Metric Filter and Alerts Exist for Custom Role Changes - Level 1 (Automated)
💼 2.7 Ensure That the Log Metric Filter and Alerts Exist for VPC Network Firewall Rule Changes - Level 1 (Automated)
💼 2.8 Ensure That the Log Metric Filter and Alerts Exist for VPC Network Route Changes - Level 1 (Automated)
💼 2.9 Ensure That the Log Metric Filter and Alerts Exist for VPC Network Changes - Level 1 (Automated)
💼 2.10 Ensure That the Log Metric Filter and Alerts Exist for Cloud Storage IAM Permission Changes - Level 1 (Automated)
💼 2.11 Ensure That the Log Metric Filter and Alerts Exist for SQL Instance Configuration Changes - Level 1 (Automated)
💼 2.12 Ensure That Cloud DNS Logging Is Enabled for All VPC Networks - Level 1 (Automated)
💼 2.13 Ensure Cloud Asset Inventory Is Enabled (Automated)
💼 2.14 Ensure 'Access Transparency' is 'Enabled' - Level 1 (Manual)
💼 2.15 Ensure 'Access Approval' is 'Enabled' - Level 2 (Automated)