Skip Default VPC Network Creation
More Info:
Ensure that “Skip Default Network Creation” constraint policy is enforced for your Google Cloud Platform (GCP) organizations in order to follow security best practices and meet networking requirements. Once enabled, this constraint skips the creation of the default Virtual Private Cloud (VPC) network and related resources during Google Cloud project creation.Risk Level
MediumAddress
Operational Maturity, Reliability, SecurityCompliance Standards
CBPTriage and Remediation
Remediation
Using Console
Using Console
To remediate the misconfiguration “Skip Default VPC Network Creation” in GCP using the GCP console, follow the below steps:
- Open the GCP console and navigate to the VPC networks page.
- Click on the “Create VPC network” button.
- In the “Name” field, enter a name for the VPC network.
- In the “IPv4 CIDR block” field, enter the CIDR block for the VPC network. For example, you can use the CIDR block 10.0.0.0/16.
- Under the “Subnets” section, click on the “Add subnet” button.
- In the “Name” field, enter a name for the subnet.
- In the “Region” field, select the region where you want to create the subnet.
- In the “IP address range” field, enter the IP address range for the subnet. For example, you can use the IP address range 10.0.0.0/24.
- Click on the “Create” button to create the VPC network and the subnet.
Using CLI
Using CLI
To remediate the “Skip Default VPC Network Creation” misconfiguration in GCP using GCP CLI, follow these steps:Note: Replace Note: Replace
- Open the Cloud Shell in your GCP console.
- Run the following command to list all the existing VPC networks in your project:
- If you do not have any custom VPC network created, you can create a new one using the following command:
<network-name> with a name of your choice.- If you have an existing custom VPC network, you can use that instead of creating a new one.
- Once the custom VPC network is created, you can create subnets in it using the following command:
<subnet-name> with a name of your choice, <network-name> with the name of the custom VPC network created in step 3 or 4, and <region> with the region where you want to create the subnet.- You can repeat step 5 to create multiple subnets in the custom VPC network.
- Once the subnets are created, you can launch your instances in the custom VPC network and the subnets created in it.
Using Python
Using Python
To remediate the “Skip Default VPC Network Creation” misconfiguration in GCP using Python, you can follow the below steps:By following the above steps, you can remediate the “Skip Default VPC Network Creation” misconfiguration in GCP using Python.
- First, you need to create a new VPC network in GCP. You can use the following Python code to create a new VPC network:
- Once you have created the new VPC network, you can modify your GCP project to use this new network as the default VPC network. You can use the following Python code to modify the project:
- Finally, you can call the above two functions to create a new VPC network and set it as the default network for your GCP project. You can use the following Python code to do this: