Benchmark: Firewall Access

This benchmark answers the following questions:

Are there any firewall rules allowing unrestricted TCP/UDP access from 0.0.0.0/0 or ::/0?
Are there any firewall rules allowing access to sensitive ports (SSH, RDP, MySQL, PostgreSQL, MongoDB, MSSQL, etc.) from 0.0.0.0/0 or ::/0?

Usage

Install the mod:

mkdir dashboards
cd dashboards
powerpipe mod init
powerpipe mod install github.com/turbot/steampipe-mod-gcp-perimeter

Start the Powerpipe server:

steampipe service start
powerpipe server

Open http://localhost:9033 in your browser and select Firewall Access.

Run this benchmark in your terminal:

powerpipe benchmark run gcp_perimeter.benchmark.firewall_access

powerpipe benchmark run gcp_perimeter.benchmark.firewall_access --share