This website uses cookies. By clicking Accept, you consent to the use of cookies. Click Here to learn more about how we use cookies.
Accept
Reject
ABOUT CHECKMATES & FAQ
Create a Post
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 

Are you a member of CheckMates?

×
Sign in with your Check Point UserCenter/PartnerMap account to access more great content and get a chance to win some Apple AirPods! If you don't have an account, create one now for free!
Offir_Zigelman
Employee Alumnus
Employee Alumnus
‎2019-08-15 05:32 AM

New CloudGuard Dome9 Entity: GCP Cloud SQL

We added support for GCP Cloud SQL in the Dome9 Compliance Engine and Inventory.

Cloud SQL is a GCP managed database service that supports PostgreSQL, MySQL, and SQL Server.

It is now possible to reason on Cloud SQL configurations such as replications and disk sizes; networking configurations like IP addresses; and security settings such as certificates and user access rights.

 

Sample GSL:

  • CloudSQL DB should not be publicly exposed
    CloudSql should not have ipAddresses contain [ ipAddress isPublic() ]
  • Make sure auto backup is enabled
    CloudSqlshould have settings.backupConfiguration.enabled

 

Note: retrieving data on CloudSQL requires additional permissions. Check the Dome9 GCP Onboarding for new onboarding procedure, and Cloud Accounts page for missing permissions notifications.

Offir Zigelman, Dome9 Product Team Lead
0 Replies
This widget could not be displayed.