Project: KICS (Provisioning / Security & Compliance)
File: googledeploymentmanager-queries.md

This page contains all queries from GoogleDeploymentManager. Below are listed queries related to GoogleDeploymentManager GCP: | Query |Severity|Category|More info| ||--|--|--| |Cloud Storage Anonymous or Publicly Accessible<br/><sup><sub>63ae3638-a38c-4ff4-b616-6e1f72a31a6a</sub></sup>|<span style="color:#ff0000">Critical</span>|Access Control|<a href="../googledeploymentmanager-queries/gcp/63ae3638-a38c-4ff4-b616-6e1f72a31a6a" target="blank">Query details</a><br><a href="https://cloud.google.com/storage/docs/jsonapi/v1/buckets">Documentation</a><br/>| |BigQuery Dataset Is Public<br/><sup><sub>83103dff-d57f-42a8-bd81-40abab64c1a7</sub></sup>|<span style="color:#bb2124">High</span>|Access Control|<a href="../googledeploymentmanager-queries/gcp/83103dff-d57f-42a8-bd81-40abab64c1a7" target="_blank">Query details</a><br><a href="https://cloud.google.com/bigquery/docs/reference/rest/v2/datasets">Documentation</a><br/>| |SQL DB Instance With SSL Disabled<br/><sup><sub>660360d3-9ca7-46d1-b147-3acc4002953f</sub></sup>|<span style="color:#bb2124">High</span>|Encryption|<a href="../googledeploymentmanager-queries/gcp/660360d3-9ca7-46d1-b147-3acc4002953f" target="_blank">Query details</a><br><a href="https://cloud.google.com/sql/docs/mysql/admin-api/rest/v1beta4/instances">Documentation</a><br/>| |Client Certificate Disabled<br/><sup><sub>dd690686-2bf9-4012-a821-f61912dd77be</sub></sup>|<span style="color:#bb2124">High</span>|Insecure Configurations|<a href="../googledeploymentmanager-queries/gcp/dd690686-2bf9-4012-a821-f61912dd77be" target="_blank">Query details</a><br><a href="https://cloud.google.com/kubernetes-engine/docs/reference/rest/v1/projects.zones.clusters">Documentation</a><br/>| |GKE Legacy Authorization Enabled<br/><sup><sub>df58d46c-783b-43e0-bdd0-d99164f712ee</sub></sup>|<span style="color:#bb2124">High</span>|Insecure Configurations|<a href="../googledeploymentmanager-queries/gcp/df58d46c-783b-43e0-bdd0-d99164f712ee" target="_blank">Query details</a><br><a href="https://cloud.google.com/kubernetes-engine/docs/reference/rest/v1/projects.locations.clusters#Cluster.LegacyAbac">Documentation</a><br/>| |Google Storage Bucket Level Access Disabled<br/><sup><sub>1239f54b-33de-482a-8132-faebe288e6a6</sub></sup>|<span style="color:#bb2124">High</span>|Insecure Configurations|<a href="../googledeploymentmanager-queries/gcp/1239f54b-33de-482a-8132-faebe288e6a6" target="blank">Query details</a><br><a href="https://cloud.google.com/storage/docs/jsonapi/v1/buckets">Documentation</a><br/>| |MySQL Instance With Local Infile On<br/><sup><sub>c759d6f2-4dd3-4160-82d3-89202ef10d87</sub></sup>|<span style="color:#bb2124">High</span>|Insecure Configurations|<a href="../googledeploymentmanager-queries/gcp/c759d6f2-4dd3-4160-82d3-89202ef10d87" target="_blank">Query details</a><br><a href="https://cloud.google.com/sql/docs/mysql/admin-api/rest/v1beta4/instances">Documentation</a><br/>| |RDP Access Is Not Restricted<br/><sup><sub>50cb6c3b-c878-4b88-b50e-d1421bada9e8</sub></sup>|<span style="color:#bb2124">High</span>|Networking and Firewall|<a href="../googledeploymentmanager-queries/gcp/50cb6c3b-c878-4b88-b50e-d1421bada9e8" target="_blank">Query details</a><br><a href="https://cloud.google.com/compute/docs/reference/rest/v1/firewalls">Documentation</a><br/>| |Cloud Storage Bucket Is Publicly Accessible<br/><sup><sub>77c1fa3f-83dc-4c9d-bfed-e1d0cc8fd9dc</sub></sup>|<span style="color:#ff7213">Medium</span>|Access Control|<a href="../googledeploymentmanager-queries/gcp/77c1fa3f-83dc-4c9d-bfed-e1d0cc8fd9dc" target="blank">Query details</a><br><a href="https://cloud.google.com/storage/docs/jsonapi/v1/bucketAccessControls">Documentation</a><br/>| |SQL DB Instance Backup Disabled<br/><sup><sub>a5bf1a1c-92c7-401c-b4c6-ebdc8b686c01</sub></sup>|<span style="color:#ff7213">Medium</span>|Backup|<a href="../googledeploymentmanager-queries/gcp/a5bf1a1c-92c7-401c-b4c6-ebdc8b686c01" target="_blank">Query details</a><br><a href="https://cloud.google.com/sql/docs/mysql/admin-api/rest/v1beta4/instances">Documentation</a><br/>| |Disk Encryption Disabled<br/><sup><sub>fc040fb6-4c23-4c0d-b12a-39edac35debb</sub></sup>|<span style="color:#ff7213">Medium</span>|Encryption|<a href="../googledeploymentmanager-queries/gcp/fc040fb6-4c23-4c0d-b12a-39edac35debb" target="_blank">Query details</a><br><a href="https://cloud.google.com/compute/docs/reference/rest/v1/instances">Documentation</a><br/>| |DNSSEC Using RSASHA1<br/><sup><sub>6d7b121a-a2ed-4e37-bd2f-80d9df1dfd35</sub></sup>|<span style="color:#ff7213">Medium</span>|Encryption|<a href="../googledeploymentmanager-queries/gcp/6d7b121a-a2ed-4e37-bd2f-80d9df1dfd35" target="_blank">Query details</a><br><a href="https://cloud.google.com/dns/docs/reference/v1/managedZones">Documentation</a><br/>| |Cloud DNS Without DNSSEC<br/><sup><sub>313d6deb-3b67-4948-b41d-35b699c2492e</sub></sup>|<span style="color:#ff7213">Medium</span>|Insecure Configurations|<a href="../googledeploymentmanager-queries/gcp/313d6deb-3b67-4948-b41d-35b699c2492e" target="_blank">Query details</a><br><a href="https://cloud.google.com/dns/docs/reference/v1/managedZones">Documentation</a><br/>| |Cluster Master Authentication Disabled<br/><sup><sub>7ef7d141-9fbb-4679-a977-fd0883436906</sub></sup>|<span style="color:#ff7213">Medium</span>|Insecure Configurations|<a href="../googledeploymentmanager-queries/gcp/7ef7d141-9fbb-4679-a977-fd0883436906" target="_blank">Query details</a><br><a href="https://cloud.google.com/kubernetes-engine/docs/reference/rest/v1/projects.locations.clusters">Documentation</a><br/>| |IP Aliasing Disabled<br/><sup><sub>28727987-e398-49b8-aef1-8a3e7789d111</sub></sup>|<span style="color:#ff7213">Medium</span>|Insecure Configurations|<a href="../googledeploymentmanager-queries/gcp/28727987-e398-49b8-aef1-8a3e7789d111" target="_blank">Query details</a><br><a href="https://cloud.google.com/kubernetes-engine/docs/reference/rest/v1/projects.locations.clusters">Documentation</a><br/>| |Network Policy Disabled<br/><sup><sub>c47f90e8-4a19-43f0-8413-cc434d286c4e</sub></sup>|<span style="color:#ff7213">Medium</span>|Insecure Configurations|<a href="../googledeploymentmanager-queries/gcp/c47f90e8-4a19-43f0-8413-cc434d286c4e" target="_blank">Query details</a><br><a href="https://cloud.google.com/kubernetes-engine/docs/reference/rest/v1/projects.zones.clusters">Documentation</a><br/>| |OSLogin Is Disabled In VM Instance<br/><sup><sub>e66e1b71-c810-4b4e-a737-0ab59e7f5e41</sub></sup>|<span style="color:#ff7213">Medium</span>|Insecure Configurations|<a href="../googledeploymentmanager-queries/gcp/e66e1b71-c810-4b4e-a737-0ab59e7f5e41" target="_blank">Query details</a><br><a href="https://cloud.google.com/compute/docs/reference/rest/v1/instances">Documentation</a><br/>| |Private Cluster Disabled<br/><sup><sub>48c61fbd-09c9-46cc-a521-012e0c325412</sub></sup>|<span style="color:#ff7213">Medium</span>|Insecure Configurations|<a href="../googledeploymentmanager-queries/gcp/48c61fbd-09c9-46cc-a521-012e0c325412" target="_blank">Query details</a><br><a href="https://cloud.google.com/kubernetes-engine/docs/reference/rest/v1/projects.zones.clusters">Documentation</a><br/>| |Shielded VM Disabled<br/><sup><sub>9038b526-4c19-4928-bca2-c03d503bdb79</sub></sup>|<span style="color:#ff7213">Medium</span>|Insecure Configurations|<a href="../googledeploymentmanager-queries/gcp/9038b526-4c19-4928-bca2-c03d503bdb79" target="_blank">Query details</a><br><a href="https://cloud.google.com/compute/docs/reference/rest/v1/instances">Documentation</a><br/>| |Compute Instance Is Publicly Accessible<br/><sup><sub>8212e2d7-e683-49bc-bf78-d6799075c5a7</sub></sup>|<span style="color:#ff7213">Medium</span>|Networking and Firewall|<a href="../googledeploymentmanager-queries/gcp/8212e2d7-e683-49bc-bf78-d6799075c5a7" target="_blank">Query details</a><br><a href="https://cloud.google.com/compute/docs/reference/rest/v1/instances">Documentation</a><br/>| |GKE Master Authorized Networks Disabled<br/><sup><sub>62c8cf50-87f0-4295-a974-8184ed78fe02</sub></sup>|<span style="color:#ff7213">Medium</span>|Networking and Firewall|<a href="../googledeploymentmanager-queries/gcp/62c8cf50-87f0-4295-a974-8184ed78fe02" target="_blank">Query details</a><br><a href="https://cloud.google.com/kubernetes-engine/docs/reference/rest/v1/projects.zones.clusters">Documentation</a><br/>| |IP Forwarding Enabled<br/><sup><sub>7c98538a-81c6-444b-bf04-e60bc3ceeec0</sub></sup>|<span style="color:#ff7213">Medium</span>|Networking and Firewall|<a href="../googledeploymentmanager-queries/gcp/7c98538a-81c6-444b-bf04-e60bc3ceeec0" target="_blank">Query details</a><br><a href="https://cloud.google.com/compute/docs/reference/rest/v1/instances">Documentation</a><br/>| |SSH Access Is Not Restricted<br/><sup><sub>dee21308-2a7a-49de-8ff7-c9b87e188575</sub></sup>|<span style="color:#ff7213">Medium</span>|Networking and Firewall|<a href="../googledeploymentmanager-queries/gcp/dee21308-2a7a-49de-8ff7-c9b87e188575" target="_blank">Query details</a><br><a href="https://cloud.google.com/compute/docs/reference/rest/v1/firewalls">Documentation</a><br/>| |Bucket Without Versioning<br/><sup><sub>227c2f58-70c6-4432-8e9a-a89c1a548cf5</sub></sup>|<span style="color:#ff7213">Medium</span>|Observability|<a href="../googledeploymentmanager-queries/gcp/227c2f58-70c6-4432-8e9a-a89c1a548cf5" target="blank">Query details</a><br><a href="https://cloud.google.com/storage/docs/jsonapi/v1/buckets">Documentation</a><br/>| |Cloud Storage Bucket Versioning Disabled<br/><sup><sub>ad0875c1-0b39-4890-9149-173158ba3bba</sub></sup>|<span style="color:#ff7213">Medium</span>|Observability|<a href="../googledeploymentmanager-queries/gcp/ad0875c1-0b39-4890-9149-173158ba3bba" target="blank">Query details</a><br><a href="https://cloud.google.com/storage/docs/jsonapi/v1/buckets">Documentation</a><br/>| |Stackdriver Logging Disabled<br/><sup><sub>95601b9a-7fe8-4aee-9b58-d36fd9382dfc</sub></sup>|<span style="color:#ff7213">Medium</span>|Observability|<a href="../googledeploymentmanager-queries/gcp/95601b9a-7fe8-4aee-9b58-d36fd9382dfc" target="_blank">Query details</a><br><a href="https://cloud.google.com/kubernetes-engine/docs/reference/rest/v1/projects.zones.clusters">Documentation</a><br/>| |Stackdriver Monitoring Disabled<br/><sup><sub>bbfc97ab-e92a-4a7b-954c-e88cec815011</sub></sup>|<span style="color:#ff7213">Medium</span>|Observability|<a href="../googledeploymentmanager-queries/gcp/bbfc97ab-e92a-4a7b-954c-e88cec815011" target="_blank">Query details</a><br><a href="https://cloud.google.com/kubernetes-engine/docs/reference/rest/v1/projects.zones.clusters">Documentation</a><br/>| |Node Auto Upgrade Disabled<br/><sup><sub>dc5c5fee-6c53-43b0-ab11-4c660e064aaf</sub></sup>|<span style="color:#ff7213">Medium</span>|Resource Management|<a href="../googledeploymentmanager-queries/gcp/dc5c5fee-6c53-43b0-ab11-4c660e064aaf" target="_blank">Query details</a><br><a href="https://cloud.google.com/kubernetes-engine/docs/reference/rest/v1/projects.zones.clusters">Documentation</a><br/>| |Project-wide SSH Keys Are Enabled In VM Instances<br/><sup><sub>6e2b1ec1-1eca-4eb7-9d4d-2882680b4811</sub></sup>|<span style="color:#ff7213">Medium</span>|Secret Management|<a href="../googledeploymentmanager-queries/gcp/6e2b1ec1-1eca-4eb7-9d4d-2882680b4811" target="_blank">Query details</a><br><a href="https://cloud.google.com/compute/docs/reference/rest/v1/instances">Documentation</a><br/>| |Cluster Labels Disabled<br/><sup><sub>8810968b-4b15-421d-918b-d91eb4bb8d1d</sub></sup>|<span style="color:#edd57e">Low</span>|Insecure Configurations|<a href="../googledeploymentmanager-queries/gcp/8810968b-4b15-421d-918b-d91eb4bb8d1d" target="_blank">Query details</a><br><a href="https://cloud.google.com/kubernetes-engine/docs/reference/rest/v1/projects.zones.clusters">Documentation</a><br/>| |COS Node Image Not Used<br/><sup><sub>dbe058d7-b82e-430b-8426-992b2e4677e7</sub></sup>|<span style="color:#edd57e">Low</span>|Insecure Configurations|<a href="../googledeploymentmanager-queries/gcp/dbe058d7-b82e-430b-8426-992b2e4677e7" target="_blank">Query details</a><br><a href="https://cloud.google.com/kubernetes-engine/docs/reference/rest/v1/projects.zones.clusters.nodePools">Documentation</a><br/>| |Not Proper Email Account In Use<br/><sup><sub>a21b8df3-c840-4b3d-a41a-10fb2afda171</sub></sup>|<span style="color:#edd57e">Low</span>|Insecure Configurations|<a href="../googledeploymentmanager-queries/gcp/a21b8df3-c840-4b3d-a41a-10fb2afda171" target="_blank">Query details</a><br><a href="https://cloud.google.com/deployment-manager/docs/configuration/set-access-control-resources">Documentation</a><br/>| Below are listed queries related to GoogleDeploymentManager GCP_BOM: | Query |Severity|Category|More info| ||--|--|--| |BOM - GCP PD<br/><sup><sub>268c65a8-58ad-43e4-9019-1a9bbc56749f</sub></sup>|<span style="color:#CCCCCC">Trace</span>|Bill Of Materials|<a href="../googledeploymentmanager-queries/gcp/268c65a8-58ad-43e4-9019-1a9bbc56749f" target="_blank">Query details</a><br><a href="https://kics.io">Documentation</a><br/>| |BOM - GCP PST<br/><sup><sub>9ed08714-b2f3-4c6d-8fb0-ac0b74ad71d8</sub></sup>|<span style="color:#CCCCCC">Trace</span>|Bill Of Materials|<a href="../googledeploymentmanager-queries/gcp/9ed08714-b2f3-4c6d-8fb0-ac0b74ad71d8" target="_blank">Query details</a><br><a href="https://kics.io">Documentation</a><br/>| |BOM - GCP SB<br/><sup><sub>c7781feb-a955-4f9f-b9cf-0d7c6f54bb59</sub></sup>|<span style="color:#CCCCCC">Trace</span>|Bill Of Materials|<a href="../googledeploymentmanager-queries/gcp/c7781feb-a955-4f9f-b9cf-0d7c6f54bb59" target="_blank">Query details</a><br><a href="https://kics.io">Documentation</a><br/>|