turbot/gcp_compliance

Control: Ensure that Cloud DNS logging is enabled for all VPC networks

Description

Cloud DNS logging records the queries from the name servers within your VPC to Stackdriver. Logged queries can come from Compute Engine VMs, GKE containers, or other GCP resources provisioned within the VPC.

Usage

Run the control in your terminal:

powerpipe control run gcp_compliance.control.compute_network_dns_logging_enabled

Snapshot and share results via Turbot Pipes:

powerpipe login
powerpipe control run gcp_compliance.control.compute_network_dns_logging_enabled --share

SQL

This control uses a named query:

compute_network_dns_logging_enabled

Tags