turbot/steampipe-mod-gcp-perimeter

Control: Cloud Run services should not be publicly accessible

Description

This control checks whether Cloud Run services have public access enabled.

Usage

Run the control in your terminal:

powerpipe control run gcp_perimeter.control.cloud_run_not_publicly_accessible

Snapshot and share results via Turbot Pipes:

powerpipe login
powerpipe control run gcp_perimeter.control.cloud_run_not_publicly_accessible --share

Steampipe Tables

SQL

select
name as resource,
case
when ingress = 'INGRESS_TRAFFIC_ALL' then 'alarm'
else 'ok'
end as status,
case
when ingress = 'INGRESS_TRAFFIC_ALL' then title || ' publicly accessible.'
else title || ' not publicly accessible.'
end as reason
, location, project
from
gcp_cloud_run_service;

Tags