aquasecurity / aquasecurity/cloudsploit

plugins missing

Open
#491 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
JavaScript
Stars
3.8k
Forks
751
Avg merge
11d 9h
Merged PRs (30d)
3

Description

In your GitHub repo there are some plugins missing as per cis recommended:

1. Ensure that Cloud KMS crypto keys are not anonymously or publicly accessible
2. Ensure that Separation of duties is enforced while assigning KMS related roles to users
3. Ensure legacy networks do not exist for a project
4. Ensure that Cloud Storage buckets have uniform bucket-level access enabled
5. Ensure that Cloud SQL database instances are not open to the world
6. Ensure that the 'cross db ownership chaining' database flag for Cloud SQL SQL Server instance is set to 'off'
7. Ensure that the 'contained database authentication' database flag for Cloud SQL on the SQL Server instance is set to 'off'
8. Ensure Compute instances are launched with Shielded VM enabled
9. Ensure that Compute instances do not have public IP addresses

Can you please help or share the plugins?

Thanks

Contributor guide

Open the contributing guide

Research direction

The issue names nine missing Google Cloud CIS checks but no files, tests, or entry points. Start by comparing existing Google Cloud plugins with the listed controls and determine the expected plugin structure and test coverage. Done means all nine checks are implemented and verified against their stated CIS requirements.

Written by the indexing model from the issue text.

Assessment

Tech stack
google-cloud, javascript
Domain
cloud, security
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
20/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.