GCP Misconfigurations
Log Monitoring
Checks performed
- Network Route Change Log Alerts Should Be Enabled
- Network Change Log Alerts Should Be Enabled
- Firewall Change Log Alerts Should Be Enabled
- SQL Configuration Change Log Alerts Should Be Enabled
- Project Ownership Change Log Alerts Should Be Enabled
- Audit Configuration Change Log Alerts Should Be Enabled
- Storage Permissions Change Log Alerts Should Be Enabled
- Custom Role Change Log Alerts Should Be Enabled
- Cloud Audit Logging Should Be Enabled
- Sinks Should Be Configured For Log Entries
- Log Buckets Should Have Retention Policies
- Cloud Sql Data Access Audit Logging Should Be Enabled
- Cloud Sql Admin Activity Audit Logging Should Be Enabled
- Cloud Sql System Event Audit Logging Should Be Enabled
- Ensure Cloud DNS Logging Is Enabled For All VPC Networks
- Ensure Cloud Asset Inventory Is Enabled
- Ensure Access Approval Is Enabled