💼 4 Virtual Machines

Description

This section covers recommendations addressing virtual machines on Google Cloud Platform.

Section	Sub Sections	Internal Rules	Policies	Flags
💼 4.1 Ensure That Instances Are Not Configured To Use the Default Service Account - Level 1 (Automated)			1
💼 4.2 Ensure That Instances Are Not Configured To Use the Default Service Account With Full Access to All Cloud APIs - Level 1 (Automated)			1
💼 4.3 Ensure “Block Project-Wide SSH Keys” Is Enabled for VM Instances - Level 1 (Automated)			1
💼 4.4 Ensure Oslogin Is Enabled for a Project - Level 1 (Automated)			1
💼 4.5 Ensure ‘Enable Connecting to Serial Ports’ Is Not Enabled for VM Instance - Level 1 (Automated)			1
💼 4.6 Ensure That IP Forwarding Is Not Enabled on Instances - Level 1 (Automated)			1
💼 4.7 Ensure VM Disks for Critical VMs Are Encrypted With Customer-Supplied Encryption Keys (CSEK) - Level 2 (Automated)			1
💼 4.8 Ensure Compute Instances Are Launched With Shielded VM Enabled - Level 2 (Automated)			1
💼 4.9 Ensure That Compute Instances Do Not Have Public IP Addresses - Level 2 (Automated)			1
💼 4.10 Ensure That App Engine Applications Enforce HTTPS Connections - Level 2 (Manual)			1
💼 4.11 Ensure That Compute Instances Have Confidential Computing Enabled - Level 2 (Automated)			1
💼 4.12 Ensure the Latest Operating System Updates Are Installed On Your Virtual Machines in All Projects - Level 2 (Manual)			1