turbot/steampipe-mod-gcp-compliance

Control: Ensure Logging is enabled for HTTP(S) Load Balancer

Description

Logging enabled on a HTTPS Load Balancer will show all network traffic and its destination.

Usage

Run the control in your terminal:

powerpipe control run gcp_compliance.control.compute_https_load_balancer_logging_enabled

Snapshot and share results via Turbot Pipes:

powerpipe login
powerpipe control run gcp_compliance.control.compute_https_load_balancer_logging_enabled --share

SQL

This control uses a named query:

select
m.self_link as resource,
case
when s.self_link is null then 'skip'
when s.log_config_enable then 'ok'
else 'alarm'
end as status,
case
when s.self_link is null then m.name || ' uses backend bucket.'
when s.log_config_enable then m.name || ' logging enabled.'
else m.name || ' logging disabled.'
end as reason
, m.location as location, m.project as project
from
gcp_compute_url_map as m
left join gcp_compute_backend_service as s on s.self_link = m.default_service;

Tags