Control: Ensure that Cloud DNS logging is enabled for all VPC networks
Description
Cloud DNS logging records the queries from the name servers within your VPC to Stackdriver. Logged queries can come from Compute Engine VMs, GKE containers, or other GCP resources provisioned within the VPC.
Usage
Run the control in your terminal:
powerpipe control run gcp_compliance.control.compute_network_dns_logging_enabled
Snapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run gcp_compliance.control.compute_network_dns_logging_enabled --share
SQL
This control uses a named query:
compute_network_dns_logging_enabled