Rule explorer
Browse every hardening rule in the catalog. Filter by platform, severity, profile level and whether the check can be automated.
110 rules foundof 16,927Page 1 of 5
| ID | Title | Platform | Severity | Level | Check |
|---|---|---|---|---|---|
| TMA-GCP-BIGQUERY-DATASETS-NOT-PUBLIC | Ensure BigQuery datasets are not anonymously or publicly accessiblegcp · Level 1 | gcp | Critical | 1 | Automated |
| TMA-GCP-CLOUDSQL-NO-OPEN-AUTHORIZED-NETWORKS | Ensure Cloud SQL instances do not allow 0.0.0.0/0 in authorised networksgcp · Level 1 | gcp | Critical | 1 | Automated |
| TMA-GCP-1.1.1 | Ensure Super Admin Email Address Is Not Tied To A Single Usergcp · Level 1 | gcp | High | 1 | Manual review |
| TMA-GCP-1.1.2 | Ensure Super Admin Account Is Not Used For Google Cloud Administrationgcp · Level 1 | gcp | High | 1 | Manual review |
| TMA-GCP-1.3 | Ensure that Multi-Factor Authentication is 'Enabled' for All Non-Service Accountsgcp · Level 1 | gcp | High | 1 | Manual review |
| TMA-GCP-1.10 | Ensure That Cloud KMS Cryptokeys Are Not Anonymously or Publicly Accessiblegcp · Level 1 | gcp | High | 1 | Manual review |
| TMA-GCP-1.11 | Ensure KMS Encryption Keys Are Rotated Within a Period of 90 Daysgcp · Level 1 | gcp | High | 1 | Manual review |
| TMA-GCP-2.5 | Ensure Log Metric Filter and Alerts Exist for Project Ownership Assignments/Changesgcp · Level 1 | gcp | High | 1 | Manual review |
| TMA-GCP-2.6 | Ensure That the Log Metric Filter and Alerts Exist for Audit Configuration Changesgcp · Level 1 | gcp | High | 1 | Manual review |
| TMA-GCP-2.13 | Ensure That Cloud DNS Logging Is Enabled for All VPC Networksgcp · Level 1 | gcp | High | 1 | Manual review |
| TMA-GCP-2.14 | Ensure Cloud Asset Inventory Is Enabledgcp · Level 1 | gcp | High | 1 | Manual review |
| TMA-GCP-4.6 | Ensure That IP Forwarding Is Not Enabled on Instancesgcp · Level 1 | gcp | High | 1 | Manual review |
| TMA-GCP-5.1 | Ensure That Cloud Storage Bucket Is Not Anonymously or Publicly Accessiblegcp · Level 1 | gcp | High | 1 | Manual review |
| TMA-GCP-6.1.1 | Ensure That a MySQL Instance Does Not Allow Anyone To Connect With Administrative Privilegesgcp · Level 1 | gcp | High | 1 | Manual review |
| TMA-GCP-6.4 | Ensure That the Cloud SQL Database Instance Requires All Incoming Connections To Use SSLgcp · Level 1 | gcp | High | 1 | Manual review |
| TMA-GCP-7.1 | Ensure That BigQuery Datasets Are Not Anonymously or Publicly Accessiblegcp · Level 1 | gcp | High | 1 | Manual review |
| TMA-GCP-CLOUDSQL-NO-PUBLIC-IP | Ensure Cloud SQL instances do not have public IPsgcp · Level 2 | gcp | High | 2 | Automated |
| TMA-GCP-CLOUDSQL-REQUIRE-SSL | Ensure Cloud SQL instances require all incoming connections to use SSLgcp · Level 1 | gcp | High | 1 | Automated |
| TMA-GCP-FIREWALL-NO-RDP-FROM-INTERNET | Ensure RDP access is restricted from the Internetgcp · Level 2 | gcp | High | 2 | Automated |
| TMA-GCP-FIREWALL-NO-SSH-FROM-INTERNET | Ensure SSH access is restricted from the Internetgcp · Level 2 | gcp | High | 2 | Automated |
| TMA-GCP-NO-DEFAULT-SA-FULL-SCOPE | Ensure instances do not use the default compute service account with full access to all Cloud APIsgcp · Level 1 | gcp | High | 1 | Automated |
| TMA-GCP-NO-USER-MANAGED-SA-KEYS | Ensure there are only GCP-managed service account keys for each service accountgcp · Level 1 | gcp | High | 1 | Automated |
| TMA-GCP-STORAGE-PUBLIC-ACCESS-PREVENTION | Ensure Cloud Storage buckets enforce public access preventiongcp · Level 1 | gcp | High | 1 | Automated |
| TMA-GCP-1.1.3 | Ensure Folders Are Structured By Environment And Sensitivitygcp · Level 2 | gcp | Medium | 2 | Manual review |
| TMA-GCP-1.1.4 | Ensure Organization Policies Are Configured For Centralized Constraintsgcp · Level 2 | gcp | Medium | 2 | Manual review |