Benchmark: 3.5.2 Restrict access to cryptographic keys to the fewest number of custodians necessary

Description

Customers are responsible for maintaining appropriate data retention policies and procedures, encryption technologies and key management processes for maintaining PCI DSS requirements.

Usage

Install the mod:

mkdir dashboards
cd dashboards
powerpipe mod init
powerpipe mod install github.com/turbot/steampipe-mod-gcp-compliance

Start the Powerpipe server:

steampipe service start
powerpipe server

Open http://localhost:9033 in your browser and select 3.5.2 Restrict access to cryptographic keys to the fewest number of custodians necessary.

Run this benchmark in your terminal:

powerpipe benchmark run gcp_compliance.benchmark.pci_dss_v321_requirement_3_5_2

Snapshot and share results via Turbot Pipes:

powerpipe benchmark run gcp_compliance.benchmark.pci_dss_v321_requirement_3_5_2 --share

Controls

Ensure KMS encryption keys has three or less than three number of users

Benchmark: 3.5.2 Restrict access to cryptographic keys to the fewest number of custodians necessary

Description

Usage

Controls

Tags