ishangsf/rspec
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Modify S6329: Make GCP sample safer (#2529)

Browse Source
This commit is contained in:
Loris S 2023-07-19 15:26:54 +02:00 committed by GitHub
parent 0fe428ee63
commit 266701ee7f
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 7 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
rules/S6329/terraform/rule.adoc
View File

@ -105,11 +105,17 @@ For GCP:
---- ----
resource "google_compute_instance" "example" { resource "google_compute_instance" "example" {
network_interface { network_interface {
network = "default" network = google_compute_network.vpc_network_example.name
} }
} }
---- ----
Note that setting `network="default"` in the network interface block leads to
other security problems such as removal of logging, Cloud VPN/VPC network
peering, and the addition of insecure firewall rules. +
A safer alternative includes creating a specific VPC or subnetwork and enforce
security measures.
include::../see.adoc[] include::../see.adoc[]
ifdef::env-github,rspecator-view[] ifdef::env-github,rspecator-view[]