CyberStrikeus/CyberStrike - Page 161

cis-gcp-foundations-2-3

Ensure That Retention Policies on Cloud Storage Buckets Used for Exporting Logs Are Configured Using Bucket Lock

cis-gcp-foundations-2-4

Ensure Log Metric Filter and Alerts Exist for Project Ownership Assignments/Changes

cis-gcp-foundations-2-5

Ensure That the Log Metric Filter and Alerts Exist for Audit Configuration Changes

cis-gcp-foundations-2-6

Ensure That the Log Metric Filter and Alerts Exist for Custom Role Changes

cis-gcp-foundations-2-7

Ensure That the Log Metric Filter and Alerts Exist for VPC Network Firewall Rule Changes

cis-gcp-foundations-2-8

Ensure That the Log Metric Filter and Alerts Exist for VPC Network Route Changes

cis-gcp-foundations-2-9

Ensure That the Log Metric Filter and Alerts Exist for VPC Network Changes

cis-gcp-foundations-3-1

Ensure That the Default Network Does Not Exist in a Project

cis-gcp-foundations-3-10

Use Identity Aware Proxy (IAP) to Ensure Only Traffic From Google IP Addresses are Allowed

cis-gcp-foundations-3-2

Ensure Legacy Networks Do Not Exist for Older Projects

cis-gcp-foundations-3-3

Ensure That DNSSEC Is Enabled for Cloud DNS

cis-gcp-foundations-3-4

Ensure That RSASHA1 Is Not Used for the Key-Signing Key in Cloud DNS DNSSEC

cis-gcp-foundations-3-5

Ensure That RSASHA1 Is Not Used for the Zone-Signing Key in Cloud DNS DNSSEC

cis-gcp-foundations-3-6

Ensure That SSH Access Is Restricted From the Internet

cis-gcp-foundations-3-7

Ensure That RDP Access Is Restricted From the Internet

cis-gcp-foundations-3-8

Ensure That VPC Flow Logs Is Enabled for Every Subnet in a VPC Network

cis-gcp-foundations-3-9

Ensure No HTTPS or SSL Proxy Load Balancers Permit SSL Policies With Weak Cipher Suites

cis-gcp-foundations-4-1

Ensure That Instances Are Not Configured To Use the Default Service Account

cis-gcp-foundations-4-10

Ensure That App Engine Applications Enforce HTTPS Connections

cis-gcp-foundations-4-11

Ensure That Compute Instances Have Confidential Computing Enabled

cis-gcp-foundations-4-12

Ensure the Latest Operating System Updates Are Installed On Your Virtual Machines in All Projects

cis-gcp-foundations-4-2

Ensure That Instances Are Not Configured To Use the Default Service Account With Full Access to All Cloud APIs

cis-gcp-foundations-4-3

Ensure 'Block Project-Wide SSH Keys' Is Enabled for VM Instances

cis-gcp-foundations-4-4

Ensure Oslogin Is Enabled for a Project

cis-gcp-foundations-4-5

Ensure 'Enable Connecting to Serial Ports' Is Not Enabled for VM Instance

cis-gcp-foundations-4-6

Ensure That IP Forwarding Is Not Enabled on Instances

cis-gcp-foundations-4-7

Ensure VM Disks for Critical VMs Are Encrypted With Customer-Supplied Encryption Keys (CSEK)

cis-gcp-foundations-4-8

Ensure Compute Instances Are Launched With Shielded VM Enabled

cis-gcp-foundations-4-9

Ensure That Compute Instances Do Not Have Public IP Addresses

cis-gcp-foundations-5-1

Ensure That Cloud Storage Bucket Is Not Anonymously or Publicly Accessible

cis-gcp-foundations-5-2

Ensure That Cloud Storage Buckets Have Uniform Bucket-Level Access Enabled

cis-gcp-foundations-6-1-1

Ensure That a MySQL Instance Does Not Allow Anyone To Connect With Administrative Privileges

cis-gcp-foundations-6-1-2

Ensure 'Skip_show_database' Database Flag for Cloud SQL MySQL Instance Is Set to 'On'

cis-gcp-foundations-6-1-3

Ensure That the 'Local_infile' Database Flag for a Cloud SQL MySQL Instance Is Set to 'Off'

cis-gcp-foundations-6-2-1

Ensure 'Log_error_verbosity' Database Flag for Cloud SQL PostgreSQL Instance Is Set to 'DEFAULT' or Stricter

cis-gcp-foundations-6-2-2

Ensure 'Log_connections' Database Flag for Cloud SQL PostgreSQL Instance Is Set to 'On'

cis-gcp-foundations-6-2-3

Ensure 'Log_disconnections' Database Flag for Cloud SQL PostgreSQL Instance Is Set to 'On'

cis-gcp-foundations-6-2-4

Ensure 'Log_statement' Database Flag for Cloud SQL PostgreSQL Instance Is Set Appropriately

cis-gcp-foundations-6-2-5

Ensure That the 'Log_min_messages' Flag for a Cloud SQL PostgreSQL Instance Is Set at Minimum to 'Warning'

cis-gcp-foundations-6-2-6

Ensure 'Log_min_error_statement' Database Flag for Cloud SQL PostgreSQL Instance Is Set to 'Error' or Stricter