More Info:

Ensure that “Restrict Load Balancer Creation Based on Load Balancer Types” policy is enforced at the GCP organization level.

Risk Level

Medium

Address

Operational Maturity, Reliability, Security

Compliance Standards

CBP

Triage and Remediation

Remediation

To remediate the misconfiguration of Restrict Load Balancer Creation Based on Load Balancer Types in GCP using the GCP console, follow the below steps:

  1. Open the GCP console and go to the “IAM & Admin” section.
  2. Click on “Roles” and search for the “Compute Load Balancer Admin” role.
  3. Click on the “Compute Load Balancer Admin” role and then click on the “Edit” button.
  4. Scroll down to the “Permissions” section and click on the “Add Permissions” button.
  5. In the search bar, type “compute.targetPools.create” and select the checkbox next to it.
  6. Repeat the same process for “compute.forwardingRules.create” and “compute.globalForwardingRules.create”.
  7. Click on the “Save” button to apply the changes.

By following the above steps, you have restricted the creation of load balancers based on load balancer types in GCP. Now, only users with the “Compute Load Balancer Admin” role can create load balancers.