GCP Knowledge Bases
Profile Applicability: Level 1 Description: It is recommended to use corporate login credentials instead of personal or consumer accounts (e.g., Gmail ac...
Mon, 24 Feb, 2025 at 2:36 AM
Profile Applicability: Level 1 Description: Enable multi-factor authentication (MFA) for all non-service accounts in Google Cloud Platform (GCP) to enhan...
Mon, 24 Feb, 2025 at 3:17 AM
Profile Applicability: Level 2 Description: Enable Security Key Enforcement for all Google Cloud Platform (GCP) admin accounts to enhance account securit...
Mon, 24 Feb, 2025 at 5:10 AM
Profile Applicability: Level 1: Description: Service accounts should not use user-managed keys. Only GCP-managed keys should be used to enhance securi...
Mon, 24 Feb, 2025 at 5:16 AM
Profile Applicability: Level 1: Description: Service accounts are special Google accounts assigned to applications or virtual machines (VMs) to interact ...
Mon, 24 Feb, 2025 at 5:22 AM
Profile Applicability: Level 1 Description: The roles Service Account User (iam.serviceAccountUser) and Service Account Token Creator (iam.serviceAccount...
Mon, 24 Feb, 2025 at 5:25 AM
Profile Applicability: Level 1 Description: Service account keys, including a key ID and private key, are used to authenticate programmatic requests to G...
Mon, 24 Feb, 2025 at 5:27 AM
Profile Applicability: Level 2: Description: To maintain security best practices, the principle of Separation of Duties should be enforced when assigning...
Mon, 24 Feb, 2025 at 5:30 AM
Profile Applicability: Level 1 Description: The IAM policies for Cloud KMS cryptokeys should be configured to prevent access by allUsers or allAuthentica...
Mon, 24 Feb, 2025 at 5:39 AM
Profile Applicability: Level 2 Description: The principle of Separation of Duties should be applied when assigning roles related to Google Cloud Key Mana...
Mon, 24 Feb, 2025 at 5:45 AM