Azure and GCP Perimeter Security, CIS Updates, and Enhanced Plugins →
Powerpipe Hub 
Hub
  • Docs
  • Home
PluginsDocsHome
Mods
turbot/steampipe-mod-gcp-compliance
GitHub
Overview
14Dashboards
621Benchmarks
202Queries
2Variables
GitHub
Loading controls...
On This Page
Usage
Controls
Tags
Get Involved
Edit on GitHub
Discuss on Slack

Benchmark: CC6.1.10

Usage

Install the mod:

mkdir dashboards
cd dashboards
powerpipe mod init
powerpipe mod install github.com/turbot/steampipe-mod-gcp-compliance

Start the Powerpipe server:

steampipe service start
powerpipe server

Open http://localhost:9033 in your browser and select CC6.1.10.

Run this benchmark in your terminal:

powerpipe benchmark run gcp_compliance.benchmark.soc_2_2017_cc_6_1_10

Snapshot and share results via Turbot Pipes:

powerpipe benchmark run gcp_compliance.benchmark.soc_2_2017_cc_6_1_10 --share

Controls

  • Alloy DB clusters should use customer-managed encryption key (CMEK) for encryption
  • Ensure that a default customer-managed encryption key (CMEK) is specified for all BigQuery Data Sets
  • Ensure that all BigQuery Tables are encrypted with Customer-managed encryption key (CMEK)
  • Ensure VM disks for critical VMs are encrypted with Customer-Supplied Encryption Keys (CSEK)
  • Ensure that Compute instances have Confidential Computing enabled
  • Ensure that dataproc cluster is encrypted using customer-managed encryption key
  • Ensure KMS encryption keys are rotated within a period of 90 days

Tags

category = Compliance
plugin = gcp
service = GCP
soc_2_2017 = true
soc_2_2017_item_id = 6.1.10
soc_2_2017_section_id = cc6
type = Benchmark
Powerpipe
Powerpipe
  • Hub
  • Docs
  • Blog
  • Changelog
Products
  • GuardrailsGuardrails
  • PipesPipes
  • SteampipeSteampipe
  • PowerpipePowerpipe
  • FlowpipeFlowpipe
  • TailpipeTailpipe
Turbot
  • Home
  • About us
  • We're hiring!
  • Contact us
Community

Our community of 3,000+ practitioners love to discuss Steampipe, workflows & DevOps automation.

Slack logoJoin us on Slack →

System StatusLegalSecurity
Terms of UseSecurityPrivacy