Control: Ensure VPC Flow logs is enabled for every subnet in VPC Network
Usage
Run the control in your terminal:
powerpipe control run gcp_compliance.control.enable_network_flow_logs
Snapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run gcp_compliance.control.enable_network_flow_logs --share
SQL
This control uses a named query:
select self_link resource, case when enable_flow_logs then 'ok' else 'alarm' end as status, case when enable_flow_logs then title || ' flow logging enabled.' else title || ' flow logging disabled.' end as reason , location as location, project as projectfrom gcp_compute_subnetwork;