GCP Misconfigurations
Compute Audit
Checks performed
- OS Login Should Be Enabled
- IP Forwarding Should Be Disabled
- Instances Should Be Multi AZ
- Total VMs Should Not Exceed Threshold
- SSH Keys Should Be Instance Specific
- VM Instances Should Not Use Default Service Accounts With Full Access To Cloud APIs
- Customer Supplied Encryption Key Should Be Enabled For Disks
- Serial Ports Connection Should Be Disabled
- Shielded VM Should Be Enabled For Compute Instances
- Compute Instances Should Not Have Public IPs
- VM Instances Should Not Use Default Service Account
- Total Resources Should Be Under Per Account Limit
- Ensure That Compute Instances Have Confidential Computing Enabled