Ensure Cloud Asset Inventory Is Enabled
More Info:
The GCP resources and IAM policies captured by GCP Cloud Asset Inventory enables security analysis, resource change tracking, and compliance auditing.Risk Level
MediumAddress
SecurityCompliance Standards
CISGCP, CBPTriage and Remediation
Remediation
Using Console
Using Console
To remediate the misconfiguration “Ensure Cloud Asset Inventory Is Enabled” for GCP using GCP console, please follow the below steps:
- Open the GCP console and go to the Navigation menu.
- Select the “Security Command Center” option under the “Security” section.
- Click on the “Organization” tab and select your organization from the dropdown list.
- Click on the “Asset Inventory” tab and select the project for which you want to enable the Cloud Asset Inventory.
- Click on the “Enable” button to enable the Cloud Asset Inventory for the selected project.
- Review the configuration settings and click on the “Save” button to save the changes.
- Once the Cloud Asset Inventory is enabled, you can view the assets and their metadata in the Security Command Center dashboard.
- To ensure that the Cloud Asset Inventory is continuously enabled, you can set up a periodic review of the configuration settings.
Using CLI
Using CLI
To remediate the misconfiguration “Ensure Cloud Asset Inventory is enabled” for GCP using GCP CLI, you can follow the below steps:Step 1: Open the GCP Cloud Shell or any other terminal where GCP CLI is installed.Step 2: Run the following command to enable the Cloud Asset Inventory API:Step 3: Next, run the following command to create a new asset inventory:Note: Replace Step 5: Finally, run the following command to view the details of the new feed:Note: Replace
<FEED_NAME> with the desired name for the new feed, <ASSET_NAME> with the name of the asset you want to inventory, and <PROJECT_ID> with the ID of the project where the asset is located.Step 4: Run the following command to list all the feeds that have been created:<FEED_NAME> with the name of the feed you created in Step 3, and <PROJECT_ID> with the ID of the project where the asset is located.By following these steps, you can ensure that the Cloud Asset Inventory is enabled for your GCP project.Using Python
Using Python
To remediate the “Ensure Cloud Asset Inventory Is Enabled” misconfiguration for GCP using Python, follow these steps:Note: Replace
- Install the necessary libraries:
- Set up authentication:
- Import the necessary libraries:
- Create a client instance:
- Check if Cloud Asset Inventory is enabled:
- If Cloud Asset Inventory is not enabled, enable it:
your_organization_id and [email protected] with the appropriate values for your GCP organization and email address. Also, make sure that the service account used for authentication has the necessary permissions to enable Cloud Asset Inventory.