CIS Google Cloud Platform Foundations 1.2.0

Policy Pack based on the GCP Foundations 1.2.0 benchmark provided by the Center for Internet Security (CIS)

First Steps

1. Install Cloud Graph CLI.
2. Set up the GCP Provider for CG with the cg init gcp command.
3. Add Policy Pack for GCP CIS benchmark using cg policy add gcp-cis-1.2.0 command.
4. Execute the ruleset using the scan command cg scan gcp.
5. Query the findings using the different options:

Use the CloudGraph Policy Pack for GCP CIS 1.2 to query all of your CIS findings for all of your GCP Accounts:

query {
  querygcpCISFindings {
    id
    result
    rule {
      id
      severity
      title
      description
      audit
      rationale
      remediation
      references
    }
  }
}

Available Ruleset

Please see the CIS 1.2 README for a table of available rules.