Master Authorized Network Should Be Enabled
More Info:
Ensures master authorized networks is set to enabled on Kubernetes clustersRisk Level
LowAddress
SecurityCompliance Standards
HITRUST, SOC2, NISTCSF, PCIDSSTriage and Remediation
Remediation
Using Console
Using Console
To remediate the misconfiguration “Master Authorized Network Should Be Enabled” in GCP, you can follow these steps:
- Open the Google Cloud Console and log in to your account.
- Select the project that you want to remediate the misconfiguration for.
- In the left navigation menu, click on “IAM & Admin” and then click on “Service Accounts”.
- Find the service account that you want to enable Master Authorized Networks for and click on its name.
- In the “Service account details” page, click on the “Edit” button at the top of the page.
- Scroll down to the “Authorized networks” section and click on the “Add item” button.
- In the “Add authorized network” dialog box, enter the IP address range that you want to allow access to this service account.
- Click on the “Save” button to save your changes.
Using CLI
Using CLI
To remediate the “Master Authorized Network Should Be Enabled” misconfiguration for GCP using GCP CLI, follow these steps:
- Open the Google Cloud SDK Shell or any terminal with the GCP CLI installed.
-
Run the following command to enable the Master Authorized Network feature:
-
After running the command, you will receive a confirmation message indicating that the metadata was updated successfully.
Note: Replace PROJECT_ID with your GCP project ID.
-
Verify that the Master Authorized Network feature is enabled by running the following command:
If the feature is enabled, you will see the following output:
- After verifying that the feature is enabled, you can proceed with configuring the Master Authorized Networks by following the official GCP documentation: https://cloud.google.com/vpc/docs/configure-private-google-access#configuring_master_authorized_networks_for_private_google_access Note: This step is optional but highly recommended to ensure the security of your GCP resources.
Using Python
Using Python
To remediate the misconfiguration “Master Authorized Network Should Be Enabled” in Google Cloud Platform (GCP) using Python, you can follow the below steps:
- Import the required libraries:
- Authenticate and create a client object:
- Get the instance object:
- Get the current cluster object:
- Check if the Master Authorized Networks is enabled or not:
- If it is not enabled, enable it by updating the cluster object:
- Run the Python script to remediate the misconfiguration.