Benchmark: 1.2 Build firewall and router configurations that restrict connections between untrusted networks and any system components in the cardholder data environment

Description

Customers are responsible for implementing firewall rules and limiting ingress and egress traffic to defined ports and protocols necessary for GCE instances and denying all other traffic.

Usage

Install the mod:

mkdir dashboards
cd dashboards
powerpipe mod init
powerpipe mod install github.com/turbot/steampipe-mod-gcp-compliance

Start the Powerpipe server:

steampipe service start
powerpipe server

Open http://localhost:9033 in your browser and select 1.2 Build firewall and router configurations that restrict connections between untrusted networks and any system components in the cardholder data environment.

Run this benchmark in your terminal:

powerpipe benchmark run gcp_compliance.benchmark.pci_dss_v321_requirement_1_2

Snapshot and share results via Turbot Pipes:

powerpipe benchmark run gcp_compliance.benchmark.pci_dss_v321_requirement_1_2 --share

Benchmarks

1.2.1 Restrict inbound and outbound traffic to that which is necessary for the cardholder data environment, and specifically deny all other traffic

Benchmark: 1.2 Build firewall and router configurations that restrict connections between untrusted networks and any system components in the cardholder data environment

Description

Usage

Benchmarks

Tags