turbot/steampipe-mod-gcp-compliance

Control: Ensure VPC Flow logs is enabled for every subnet in VPC Network

Usage

Run the control in your terminal:

powerpipe control run gcp_compliance.control.enable_network_flow_logs

Snapshot and share results via Turbot Pipes:

powerpipe login
powerpipe control run gcp_compliance.control.enable_network_flow_logs --share

SQL

This control uses a named query:

select
self_link resource,
case
when enable_flow_logs then 'ok'
else 'alarm'
end as status,
case
when enable_flow_logs
then title || ' flow logging enabled.'
else title || ' flow logging disabled.'
end as reason
, location as location, project as project
from
gcp_compute_subnetwork;

Tags