> ## Documentation Index > Fetch the complete documentation index at: https://cloudanix.com/docs/llms.txt > Use this file to discover all available pages before exploring further. # Minimum Number of Compute Instances Should Be Configured For Load Balancers Regional Instance Groups ### More Info: Minimum number of instances should be configured for your Load Balancer regional instance groups to improve the reliability. ### Risk Level Low ### Address Reliability, Security ### Compliance Standards * APRA CPS 234 (Australia) * BSI C5 (Germany) * Brazil LGPD * CCPA / CPRA (California) * CIS Critical Security Controls v8 * CMMC 2.0 * CSA Cloud Controls Matrix v4 * Cloudanix Best Practice * DPDPA * Digital Operational Resilience Act (EU) * ISO/IEC 27017 * ISO/IEC 27018 * ISO/IEC 27701 * KSA PDPL * MAS Technology Risk Management (Singapore) * MITRE ATT\&CK (Cloud) * NIS2 Directive * NIST SP 800-171 * NYDFS 23 NYCRR 500 * SWIFT Customer Security Controls Framework * Sarbanes-Oxley IT General Controls * UK NCSC Cyber Assessment Framework ### Triage and Remediation ### Remediation To remediate the misconfiguration "Minimum Number of Compute Instances Should Be Configured For Load Balancers Regional Instance Groups" for GCP using GCP console, follow the steps below: 1. Open the GCP console and navigate to the Load balancing page. 2. Select the load balancer for which you want to configure the regional instance group. 3. Click on the Edit button at the top of the page. 4. In the Backend configuration section, select the regional backend service for which you want to configure the regional instance group. 5. Under the Instance groups section, click on the Edit button. 6. In the Edit instance group dialog box, scroll down to the Autoscaling section. 7. In the Minimum instances field, enter the minimum number of compute instances that should be configured for the regional instance group. 8. Click on the Save button to save the changes. 9. Verify that the changes have been applied by checking the instance group details. By following these steps, you can remediate the misconfiguration "Minimum Number of Compute Instances Should Be Configured For Load Balancers Regional Instance Groups" for GCP using GCP console. # To remediate the misconfiguration of minimum number of compute instances not being configured for Load Balancers Regional Instance Groups in GCP using GCP CLI, follow these steps: 1. Open the Cloud Shell in the GCP Console. 2. Check the current configuration of the regional instance group by running the following command: ``` gcloud compute instance-groups managed describe [INSTANCE_GROUP_NAME] --region [REGION] ``` Replace `[INSTANCE_GROUP_NAME]` with the name of the regional instance group and `[REGION]` with the region where the instance group is located. 3. Check the current configuration of the autoscaler for the regional instance group by running the following command: ``` gcloud compute instance-groups managed describe-autoscaler [INSTANCE_GROUP_NAME] --region [REGION] ``` Replace `[INSTANCE_GROUP_NAME]` with the name of the regional instance group and `[REGION]` with the region where the instance group is located. 4. If the minimum number of instances is not configured, set the minimum number of instances to 1 by running the following command: ``` gcloud compute instance-groups managed set-autoscaling [INSTANCE_GROUP_NAME] --region [REGION] --min-num-replicas 1 ``` Replace `[INSTANCE_GROUP_NAME]` with the name of the regional instance group and `[REGION]` with the region where the instance group is located. 5. Verify that the minimum number of instances is now set to 1 by running the following command: ``` gcloud compute instance-groups managed describe-autoscaler [INSTANCE_GROUP_NAME] --region [REGION] ``` Replace `[INSTANCE_GROUP_NAME]` with the name of the regional instance group and `[REGION]` with the region where the instance group is located. 6. Repeat the above steps for any other regional instance groups that are not configured with a minimum number of instances. By following these steps, you can remediate the misconfiguration of minimum number of compute instances not being configured for Load Balancers Regional Instance Groups in GCP using GCP CLI. To remediate the misconfiguration "Minimum Number of Compute Instances Should Be Configured For Load Balancers Regional Instance Groups" for GCP using python, follow the below steps: 1. First, you need to authenticate and authorize the Google Cloud SDK using the following command: ```python theme={null} gcloud auth login ``` 2. Install the necessary python libraries such as `google-auth`, `google-auth-oauthlib`, `google-auth-httplib2`, and `google-cloud-compute` using the following command: ```python theme={null} pip install google-auth google-auth-oauthlib google-auth-httplib2 google-cloud-compute ``` 3. Now, you need to write a python script to remediate the misconfiguration. Here is an example script: ```python theme={null} from google.oauth2 import service_account from google.cloud import compute_v1 # Set the project ID, region, and instance group name project_id = 'your-project-id' region = 'us-central1' instance_group_name = 'your-instance-group-name' # Set the minimum number of instances to be configured min_instances = 2 # Authenticate using the service account key file credentials = service_account.Credentials.from_service_account_file('path/to/service/account/key.json') # Create the compute client compute_client = compute_v1.InstanceGroupManagerClient(credentials=credentials) # Get the instance group URL instance_group_url = f'/compute/v1/projects/{project_id}/regions/{region}/instanceGroupManagers/{instance_group_name}' # Get the current instance group instance_group = compute_client.get(instance_group_url) # Update the minimum number of instances instance_group.target_size = min_instances # Update the instance group operation = compute_client.update(instance_group_url, instance_group) # Wait for the operation to complete result = operation.result() print(f"Minimum number of compute instances for instance group {instance_group_name} in region {region} is updated to {min_instances}.") ``` 4. Replace the `project_id`, `region`, `instance_group_name`, and `min_instances` with your own values. 5. Run the python script using the following command: ```python theme={null} python remediate.py ``` This will remediate the misconfiguration by setting the minimum number of compute instances for the load balancer regional instance group in GCP. ```hcl theme={null} resource "google_compute_region_instance_group_manager" "LOAD_BALANCER_GROUP" { name = "LOAD_BALANCER_GROUP_NAME" # replace with the MIG name base_instance_name = "BASE_INSTANCE_NAME" # replace region = "REGION" # e.g. "us-central1" version { instance_template = google_compute_instance_template.GROUP_TEMPLATE.self_link } target_size = 2 # optional: ensure at least 2 instances exist initially } resource "google_compute_region_autoscaler" "LOAD_BALANCER_GROUP_AUTOSCALER" { name = "LOAD_BALANCER_GROUP_AUTOSCALER_NAME" # replace region = google_compute_region_instance_group_manager.LOAD_BALANCER_GROUP.region target = google_compute_region_instance_group_manager.LOAD_BALANCER_GROUP.self_link autoscaling_policy { min_replicas = 2 # required: enforce minimum number of instances for the LB max_replicas = 10 # replace with your desired maximum } } ``` This change does not force replacement of the managed instance group or autoscaler; it updates the autoscaling policy and may trigger scaling actions to ensure at least 2 instances are running. Verification: `terraform plan` should show an in-place update on `google_compute_region_autoscaler.LOAD_BALANCER_GROUP_AUTOSCALER` changing `autoscaling_policy[0].min_replicas` to `2` (and `target_size` if you adjusted it). ### Additional Reading: * [https://cloud.google.com/compute/docs/instance-groups/adding-an-instance-group-to-a-load-balancer](https://cloud.google.com/compute/docs/instance-groups/adding-an-instance-group-to-a-load-balancer)