aquasecurity / aquasecurity/cloudsploit
plugins missing
- Dominant language
- JavaScript
- Stars
- 3.8k
- Forks
- 751
- Avg merge
- 11d 9h
- Merged PRs (30d)
- 3
Description
In your GitHub repo there are some plugins missing as per cis recommended:
1. Ensure that Cloud KMS crypto keys are not anonymously or publicly accessible
2. Ensure that Separation of duties is enforced while assigning KMS related roles to users
3. Ensure legacy networks do not exist for a project
4. Ensure that Cloud Storage buckets have uniform bucket-level access enabled
5. Ensure that Cloud SQL database instances are not open to the world
6. Ensure that the 'cross db ownership chaining' database flag for Cloud SQL SQL Server instance is set to 'off'
7. Ensure that the 'contained database authentication' database flag for Cloud SQL on the SQL Server instance is set to 'off'
8. Ensure Compute instances are launched with Shielded VM enabled
9. Ensure that Compute instances do not have public IP addresses
Can you please help or share the plugins?
Thanks
Contributor guide
Research direction
The issue names nine missing Google Cloud CIS checks but no files, tests, or entry points. Start by comparing existing Google Cloud plugins with the listed controls and determine the expected plugin structure and test coverage. Done means all nine checks are implemented and verified against their stated CIS requirements.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- google-cloud, javascript
- Domain
- cloud, security
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 20/100