Skip to content

Latest commit

 

History

History
83 lines (81 loc) · 5.55 KB

securitycontrols.md

File metadata and controls

83 lines (81 loc) · 5.55 KB

Security Controls

Security Control File Name Resource Name
AC-1 ./service-account.yaml cluster-name-sa
AC-1 ./service-account.yaml cluster-name-sa-artifactregistry-reader-permissions
AC-1 ./service-account.yaml cluster-name-sa-logwriter-permissions
AC-1 ./service-account.yaml cluster-name-sa-metricwriter-permissions
AC-1 ./service-account.yaml cluster-name-sa-monitoring-viewer-permissions
AC-1 ./service-account.yaml cluster-name-sa-secretmanager-secretaccessor-permissions
AC-1 ./service-account.yaml cluster-name-sa-stackdriver-metadata-writer-permissions
AC-1 ./service-account.yaml cluster-name-sa-storage-object-viewer-permissions
AC-1 ./service-account.yaml project-id-tier3-sa-serviceaccount-user-cluster-name-sa-permissions
AC-3 ./service-account.yaml cluster-name-sa
AC-3 ./service-account.yaml cluster-name-sa-artifactregistry-reader-permissions
AC-3 ./service-account.yaml cluster-name-sa-artifactregistry-reader-permissions
AC-3 ./service-account.yaml cluster-name-sa-logwriter-permissions
AC-3 ./service-account.yaml cluster-name-sa-logwriter-permissions
AC-3 ./service-account.yaml cluster-name-sa-metricwriter-permissions
AC-3 ./service-account.yaml cluster-name-sa-metricwriter-permissions
AC-3 ./service-account.yaml cluster-name-sa-monitoring-viewer-permissions
AC-3 ./service-account.yaml cluster-name-sa-monitoring-viewer-permissions
AC-3 ./service-account.yaml cluster-name-sa-secretmanager-secretaccessor-permissions
AC-3 ./service-account.yaml cluster-name-sa-secretmanager-secretaccessor-permissions
AC-3 ./service-account.yaml cluster-name-sa-stackdriver-metadata-writer-permissions
AC-3 ./service-account.yaml cluster-name-sa-stackdriver-metadata-writer-permissions
AC-3 ./service-account.yaml cluster-name-sa-storage-object-viewer-permissions
AC-3 ./service-account.yaml cluster-name-sa-storage-object-viewer-permissions
AC-3 ./service-account.yaml project-id-tier3-sa-serviceaccount-user-cluster-name-sa-permissions
AC-3 ./service-account.yaml project-id-tier3-sa-serviceaccount-user-cluster-name-sa-permissions
AC-3 ./service-account.yaml project-id-tier3-sa-serviceaccount-user-cluster-name-sa-permissions
AC-3(7) ./service-account.yaml cluster-name-sa
AC-3(7) ./service-account.yaml cluster-name-sa-artifactregistry-reader-permissions
AC-3(7) ./service-account.yaml cluster-name-sa-artifactregistry-reader-permissions
AC-3(7) ./service-account.yaml cluster-name-sa-logwriter-permissions
AC-3(7) ./service-account.yaml cluster-name-sa-logwriter-permissions
AC-3(7) ./service-account.yaml cluster-name-sa-metricwriter-permissions
AC-3(7) ./service-account.yaml cluster-name-sa-metricwriter-permissions
AC-3(7) ./service-account.yaml cluster-name-sa-monitoring-viewer-permissions
AC-3(7) ./service-account.yaml cluster-name-sa-monitoring-viewer-permissions
AC-3(7) ./service-account.yaml cluster-name-sa-secretmanager-secretaccessor-permissions
AC-3(7) ./service-account.yaml cluster-name-sa-secretmanager-secretaccessor-permissions
AC-3(7) ./service-account.yaml cluster-name-sa-stackdriver-metadata-writer-permissions
AC-3(7) ./service-account.yaml cluster-name-sa-stackdriver-metadata-writer-permissions
AC-3(7) ./service-account.yaml cluster-name-sa-storage-object-viewer-permissions
AC-3(7) ./service-account.yaml cluster-name-sa-storage-object-viewer-permissions
AC-3(7) ./service-account.yaml project-id-tier3-sa-serviceaccount-user-cluster-name-sa-permissions
AC-3(7) ./service-account.yaml project-id-tier3-sa-serviceaccount-user-cluster-name-sa-permissions
AC-3(7) ./service-account.yaml project-id-tier3-sa-serviceaccount-user-cluster-name-sa-permissions
AC-4 ./gke.yaml cluster-name
AC-4 ./gke.yaml cluster-name
AC-4 ./host-project/subnet.yaml project-id-cluster-name-snet
AC-4(21) ./host-project/subnet.yaml project-id-cluster-name-snet
AU-12 ./app-infra-classification-folder/firewall.yaml project-id-cluster-name-egress-allow-azdo
AU-12 ./app-infra-classification-folder/firewall.yaml project-id-cluster-name-egress-allow-azdo
AU-12 ./app-infra-classification-folder/firewall.yaml project-id-cluster-name-egress-allow-docker
AU-12 ./app-infra-classification-folder/firewall.yaml project-id-cluster-name-egress-allow-github
AU-12 ./gke.yaml cluster-name
AU-12 ./gke.yaml cluster-name
AU-12 ./host-project/firewall.yaml project-id-cluster-name-lb-health-check
AU-12 ./host-project/firewall.yaml project-id-cluster-name-lb-health-check
AU-12 ./host-project/subnet.yaml project-id-cluster-name-snet
AU-12 ./host-project/subnet.yaml project-id-cluster-name-snet
IA-3(3) ./host-project/subnet.yaml project-id-cluster-name-snet
IA-3(3) ./host-project/subnet.yaml project-id-cluster-name-snet
IA-3(3) ./host-project/subnet.yaml project-id-cluster-name-snet
SC-12(2) ./gke.yaml cluster-name
SC-12(2) ./gke.yaml cluster-name
SC-12(2) ./kms.yaml cluster-name-etcd-key
SC-12(2) ./kms.yaml cluster-name-kmskeyring
SC-28 ./gke.yaml cluster-name
SC-28 ./gke.yaml cluster-name
SC-28(1) ./gke.yaml cluster-name
SC-28(1) ./gke.yaml cluster-name
SC-7 ./gke.yaml cluster-name
SC-7 ./gke.yaml cluster-name
SC-7(9) ./app-infra-classification-folder/firewall.yaml project-id-cluster-name-egress-allow-azdo
SC-7(9) ./app-infra-classification-folder/firewall.yaml project-id-cluster-name-egress-allow-azdo
SC-7(9) ./app-infra-classification-folder/firewall.yaml project-id-cluster-name-egress-allow-docker
SC-7(9) ./app-infra-classification-folder/firewall.yaml project-id-cluster-name-egress-allow-github