GCP Knowledge Bases

2.16 Ensure Logging is Enabled for HTTP(S) Load Balancer (Automated)
Profile Applicability: Level 2 Description: Enabling logging for HTTP(S) Load Balancers in Google Cloud Platform (GCP) captures and provides visibility i...
Wed, 12 Feb, 2025 at 6:36 AM
3.1 Ensure That the Default Network Does Not Exist in a Project (Automated)
Profile Applicability: Level 2 Description: To enhance security, it is recommended to delete the default network in Google Cloud projects. The default ne...
Wed, 12 Feb, 2025 at 6:44 AM
3.2 Ensure Legacy Networks Do Not Exist for Older Projects (Automated)
Profile Applicability: Level 1 Description: Legacy networks are deprecated and no longer supported for new projects in Google Cloud. This recommendation ...
Wed, 12 Feb, 2025 at 7:09 AM
3.3 Ensure That DNSSEC Is Enabled for Cloud DNS (Automated)
Profile Applicability: Level 1 Description: Cloud DNS is a high-performance and cost-effective Domain Name System service provided by Google Cloud. Enabl...
Wed, 12 Feb, 2025 at 10:28 AM
3.4 Ensure That RSASHA1 Is Not Used for the Key-Signing Key in Cloud DNS DNSSEC (Automated)
Profile Applicability: Level 1 Description: It is recommended to avoid using the RSASHA1 algorithm for the key-signing key in Cloud DNS DNSSEC, as this a...
Wed, 12 Feb, 2025 at 10:33 AM
3.5 Ensure That RSASHA1 Is Not Used for the Zone-Signing Key in Cloud DNS DNSSEC (Automated)
Profile Applicability: Level 1 Description: The RSASHA1 algorithm has been deprecated and removed from general use by Google. If still in use, it require...
Wed, 12 Feb, 2025 at 10:37 AM
3.6 Ensure SSH Access Is Restricted From the Internet (Automated)
Profile Applicability: Level 2 Description: Firewall rules in Google Cloud Platform (GCP) are defined at the VPC level and control ingress and egress tra...
Wed, 12 Feb, 2025 at 10:43 AM
3.7 Ensure That RDP Access Is Restricted From the Internet (Automated)
Profile Applicability: Level 2 Description: Firewall rules in Google Cloud Platform (GCP) regulate ingress and egress traffic at the VPC level. These rul...
Wed, 12 Feb, 2025 at 10:47 AM
3.8 Ensure VPC Flow Logs Are Enabled for Every Subnet in a VPC Network (Automated)
Profile Applicability: Level 2 Description: VPC Flow Logs capture detailed information about the IP traffic to and from network interfaces within an orga...
Wed, 12 Feb, 2025 at 10:51 AM
3.9 Ensure No HTTPS or SSL Proxy Load Balancers Permit SSL Policies With Weak Cipher Suites (Manual)
Profile Applicability: Level 1 Description: SSL policies control the Transport Layer Security (TLS) features allowed for clients connecting to load balan...
Wed, 12 Feb, 2025 at 10:57 AM