Benchmark: 1.3.4 Do not allow unauthorized outbound traffic from the cardholder data environment to the Internet

Description

Customers are responsible for implementing perimeter firewalls and configuring firewall rules and ACLs for their in-scope GCP Products. Customers are responsible for developing appropriate firewall rules or using additional firewall technologies to develop appropriate DMZ and internal networks.

Usage

Install the mod:

mkdir dashboards
cd dashboards
powerpipe mod init
powerpipe mod install github.com/turbot/steampipe-mod-gcp-compliance

Start the Powerpipe server:

steampipe service start
powerpipe server

Open http://localhost:9033 in your browser and select 1.3.4 Do not allow unauthorized outbound traffic from the cardholder data environment to the Internet.

Run this benchmark in your terminal:

powerpipe benchmark run gcp_compliance.benchmark.pci_dss_v321_requirement_1_3_4

Snapshot and share results via Turbot Pipes:

powerpipe benchmark run gcp_compliance.benchmark.pci_dss_v321_requirement_1_3_4 --share

Controls

Ensure Kubernetes Cluster is created with Alias IP ranges enabled

Benchmark: 1.3.4 Do not allow unauthorized outbound traffic from the cardholder data environment to the Internet

Description

Usage

Controls

Tags