Control: Ensure Logging is enabled for HTTP(S) Load Balancer
Description
Logging enabled on a HTTPS Load Balancer will show all network traffic and its destination.
Usage
Run the control in your terminal:
powerpipe control run gcp_compliance.control.compute_https_load_balancer_logging_enabled
Snapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run gcp_compliance.control.compute_https_load_balancer_logging_enabled --share
SQL
This control uses a named query:
select m.self_link as resource, case when s.self_link is null then 'skip' when s.log_config_enable then 'ok' else 'alarm' end as status, case when s.self_link is null then m.name || ' uses backend bucket.' when s.log_config_enable then m.name || ' logging enabled.' else m.name || ' logging disabled.' end as reason , m.location as location, m.project as projectfrom gcp_compute_url_map as m left join gcp_compute_backend_service as s on s.self_link = m.default_service;