Control: Ensure compute firewall rule have logging enabled
Description
Firewall rules should have logging enabled. This control fails if logging is disabled for firewall rule.
Usage
Run the control in your terminal:
powerpipe control run gcp_compliance.control.compute_firewall_rule_logging_enabledSnapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run gcp_compliance.control.compute_firewall_rule_logging_enabled --shareSQL
This control uses a named query:
select self_link as resource, case when log_config_enable then 'ok' else 'alarm' end as status, case when log_config_enable then name || ' logging enabled.' else name || ' logging disabled.' end as reason , location as location, project as projectfrom gcp_compute_firewall;