turbot / steampipe-mod-gcp-compliance

Run individual configuration, compliance and security controls or full compliance benchmarks for CIS across all of your GCP projects using Powerpipe and Steampipe.
https://hub.powerpipe.io/mods/turbot/gcp_compliance
Apache License 2.0
35 stars 10 forks source link

CIS v1.3.0 and v2.0.0 3.10 control does not include all IPs and ports #100

Closed cbruno10 closed 1 year ago

cbruno10 commented 1 year ago

Describe the bug Starting in CIS v1.3.0, they added the IP 35.235.240.0/20 and port 443 to the list of allowed IPs/ports, but our control for 3.10 still uses the IPs and port from what CIS v1.2.0 said.

Steampipe version (steampipe -v) v0.19.5

Plugin version (steampipe plugin list) v0.35.0

To reproduce View CIS v1.3.0 and v2.0.0 documents

Expected behavior We should follow recommendations from CIS

Additional context Add any other context about the problem here.