Benchmark: 7.1 Limit access to system components and cardholder data to only those individuals whose job requires such access
Description
GCP Customers are responsible for managing access to all GCP products (GCE, VPC, GCS) that are included in their CDE. GCP provides various mechanisms for controlling access to the services including IAM for integration with corporate directories and granular access controls to the GCP Management Console.
Usage
Install the mod:
mkdir dashboardscd dashboardspowerpipe mod initpowerpipe mod install github.com/turbot/steampipe-mod-gcp-complianceStart the Powerpipe server:
steampipe service startpowerpipe serverOpen http://localhost:9033 in your browser and select 7.1 Limit access to system components and cardholder data to only those individuals whose job requires such access.
Run this benchmark in your terminal:
powerpipe benchmark run gcp_compliance.benchmark.pci_dss_v321_requirement_7_1Snapshot and share results via Turbot Pipes:
powerpipe benchmark run gcp_compliance.benchmark.pci_dss_v321_requirement_7_1 --shareBenchmarks
Controls
- Check if BigQuery datasets are publicly readable
- Ensure that Cloud Storage bucket is not anonymously or publicly accessible