Bigtable Cluster Tables Should Be Encrypted
More Info:
Ensure that Bigtable cluster tables are encrypted.Risk Level
HighAddress
SecurityCompliance Standards
SOC2, NIST, GDPR, ISO27001, HIPAA, HITRUST, NISTCSFTriage and Remediation
Remediation
Using Console
Using Console
To remediate the misconfiguration “Bigtable Cluster Tables Should Be Encrypted” for GCP using GCP console, follow the below steps:
- Open the Google Cloud Console and navigate to the Bigtable instance that needs to be remediated.
- Click on the name of the instance to open its details page.
- In the left-hand menu, click on “Encryption”.
- Under “Encryption at rest”, select “Customer-managed encryption keys (CMEK)”.
- Choose a key from the list of existing keys or create a new one by clicking on “Create a key”.
- If creating a new key, enter a name and select a location for the key.
- Click “Create” to create the key.
- Once a key is selected or created, click “Save” to enable encryption for the Bigtable instance.
- Repeat these steps for each Bigtable instance that needs to be remediated.
Using CLI
Using CLI
To remediate the misconfiguration “Bigtable Cluster Tables Should Be Encrypted” in GCP using GCP CLI, you can follow the below steps:Replace the This command will display the cluster details, including the encryption configuration.By following these steps, you can remediate the misconfiguration “Bigtable Cluster Tables Should Be Encrypted” for GCP using GCP CLI.
- Open the Cloud Shell in the GCP Console.
- Run the following command to list all the Bigtable instances in the project:
- Select the Bigtable instance for which you want to enable encryption.
- Run the following command to enable encryption for the selected Bigtable instance:
[INSTANCE_ID] with the ID of the Bigtable instance, [CLUSTER_ID] with the ID of the cluster, and [KMS_KEY_NAME] with the name of the KMS key to use for encryption.- Verify that encryption is enabled for the Bigtable cluster by running the following command:
Using Python
Using Python
To remediate the misconfiguration “Bigtable Cluster Tables Should Be Encrypted” in GCP using Python, you can follow the below steps:Replace
- First, you need to install the required libraries. You can install the google-cloud-bigtable library using the following command:
- Next, you need to create a client object for Bigtable. You can do this using the following code:
PROJECT_ID with your GCP project ID.- Once you have created the client object, you can get a list of all the Bigtable instances in your project using the following code:
- For each instance, you can get a list of all the tables and check if the tables are encrypted or not using the following code:
- Finally, you can save the changes by calling the
update()method on the table object.