Cloud CDN Global Backend Services Failover Policy Should Be Enabled
More Info:
Ensure Cloud CDN global backend services have failover policy enabled.Risk Level
HighAddress
Operational Maturity, Performance Efficiency, Reliability, SecurityCompliance Standards
CBPTriage and Remediation
Remediation
Using Console
Using Console
To remediate the misconfiguration “Cloud CDN Global Backend Services Failover Policy Should Be Enabled” in GCP, please follow the below steps:
- Login to the GCP console (https://console.cloud.google.com/).
- Go to the Cloud CDN page by navigating to the “Navigation menu > Network Services > Cloud CDN”.
- Select the CDN resource for which you want to enable the failover policy.
- Under the “Backend configuration” section, click on the “Edit” button.
- Scroll down to the “Failover policy” section and click on the “Add failover endpoint” button.
- Enter the details of the failover endpoint, such as the IP address, port, and protocol.
- Click on the “Save” button to save the changes.
Using CLI
Using CLI
To remediate the misconfiguration “Cloud CDN Global Backend Services Failover Policy Should Be Enabled” for GCP using GCP CLI, follow the below steps:Replace [BACKEND_SERVICE_NAME] with the name of the identified backend service.This command will display the details of the backend service, including the failover policy status.By following these steps, you can remediate the misconfiguration “Cloud CDN Global Backend Services Failover Policy Should Be Enabled” for GCP using GCP CLI.
- Open the Google Cloud Console and select the project in which you want to remediate the misconfiguration.
- Open the Cloud Shell by clicking on the icon on the top right corner of the console.
- In the Cloud Shell, run the following command to list the existing backend services:
- Identify the backend service that is associated with the Cloud CDN.
- Run the following command to enable the failover policy for the identified backend service:
- Verify that the failover policy is enabled by running the following command:
Using Python
Using Python
To remediate the misconfiguration “Cloud CDN Global Backend Services Failover Policy Should Be Enabled” for GCP using Python, follow the below steps:Step 1: Import the required libraries and authenticate to GCP.Step 2: Get the list of global backend services.Step 3: Loop through the backend services and check if the failover policy is enabled. If not, enable it.Step 4: Verify if the failover policy is enabled for all the global backend services.By following these steps, the misconfiguration “Cloud CDN Global Backend Services Failover Policy Should Be Enabled” can be remediated for GCP using Python.