NIST 800-53 Rev. 4 for GCP

Policy Pack based on the 800-53 Rev. 4 benchmark provided by the The National Institute of Standards and Technology (NIST)

First Steps

1. Install Cloud Graph CLI.
2. Set up the GCP Provider for CG with the cg init aws command.
3. Add Policy Pack NIST 800-53 Rev. 4 for GCP benchmark using cg policy add gcp-nist-800-53-rev4 command.
4. Execute the ruleset using the scan command cg scan gcp.
5. Query the findings using the different options:

Query findings by provider:

query {
  querygcpFindings {
    NISTFindings {
      id
      resourceId
      result
    }
  }
}

Query findings by specific benchmark:

query {
  querygcpNISTFindings {
    id
    resourceId
    result
  }
}

Query findings by resource:

query {
  querygcpIamPolicy {
    id
    NISTFindings {
      id
      resourceId
      result
    }
  }
}

Available Ruleset

Please see the NIST 800-53 Rev. 4 README for a table of available rules.