Skip to main content

๐Ÿ’ผ 4 Virtual Machines

  • Contextual name: ๐Ÿ’ผ 4 Virtual Machines
  • ID: /frameworks/cis-gcp-v2.0.0/04
  • Located in: ๐Ÿ’ผ CIS GCP v2.0.0

Descriptionโ€‹

This section covers recommendations addressing virtual machines on Google Cloud Platform.

Similarโ€‹

  • Internal
    • ID: dec-b-89a967c5

Sub Sectionsโ€‹

SectionSub SectionsInternal RulesPoliciesFlags
๐Ÿ’ผ 4.1 Ensure That Instances Are Not Configured To Use the Default Service Account - Level 1 (Automated)
๐Ÿ’ผ 4.2 Ensure That Instances Are Not Configured To Use the Default Service Account With Full Access to All Cloud APIs - Level 1 (Automated)
๐Ÿ’ผ 4.3 Ensure โ€œBlock Project-Wide SSH Keysโ€ Is Enabled for VM Instances - Level 1 (Automated)
๐Ÿ’ผ 4.4 Ensure Oslogin Is Enabled for a Project - Level 1 (Automated)
๐Ÿ’ผ 4.5 Ensure 'Enable Connecting to Serial Ports' Is Not Enabled for VM Instance - Level 1 (Automated)
๐Ÿ’ผ 4.6 Ensure That IP Forwarding Is Not Enabled on Instances - Level 1 (Automated)
๐Ÿ’ผ 4.7 Ensure VM Disks for Critical VMs Are Encrypted With Customer-Supplied Encryption Keys (CSEK) - Level 2 (Automated)
๐Ÿ’ผ 4.8 Ensure Compute Instances Are Launched With Shielded VM Enabled - Level 2 (Automated)
๐Ÿ’ผ 4.9 Ensure That Compute Instances Do Not Have Public IP Addresses - Level 2 (Automated)
๐Ÿ’ผ 4.10 Ensure That App Engine Applications Enforce HTTPS Connections - Level 2 (Manual)
๐Ÿ’ผ 4.11 Ensure That Compute Instances Have Confidential Computing Enabled - Level 2 (Automated)
๐Ÿ’ผ 4.12 Ensure the Latest Operating System Updates Are Installed On Your Virtual Machines in All Projects - Level 2 (Manual)