gcp_compliance

GCP Compliance

API keys are insecure because they can be viewed publicly, such as from within a browser, or they can be accessed on a device where the key resides. It is recommended to restrict API keys to use (call) only APIs required by an application.

iam_api_key_restricts_apis

all_controls_iam

nist_800_53_rev_5_pl_8

Information Security Architecture (PL-8)

nist_csf_v10_pr_ip_2

PR.IP-2

nist_800_53_rev_5_sa_8

Security Engineering Principles (SA-8)

Ensure API keys are restricted to only APIs that application needs access

Run individual configuration, compliance and security controls or full compliance benchmarks for CIS, Forseti Security and CFT Scorecard across all your GCP projects using Powerpipe and Steampipe.

Apache License 2.0

steampipe-mod-gcp-compliance

Control: Ensure API keys are restricted to only APIs that application needs access

Description

Usage

SQL

Tags