12_Cloud-Marketplace-Config.md

Configuration of Cloud Marketplaces

Objective

Restrict Third-Party CSP Marketplace software to GC-approved products.

Key Considerations

• Only GC approved cloud marketplace products are to be consumed. Turning on the commercial marketplace is prohibited.
• Submit requests to add third-party products to marketplace to SSC Cloud Broker.

Validation

• Confirm that third-party marketplace restrictions have been implemented.

Applicable Service Models

• IaaS, PaaS, SaaS

References

1. SPIN 2017-01, subsection 6.2.5
2. Refer to GCconnex for current list of approved marketplace products.
3. Related security controls: CM‑2, CM‑3, CM‑4, CM‑5, CM‑8, SA‑22