Add finding

nccgroup · May 19, 2019 · 68c9dbf · 68c9dbf
1 parent c27fafc
commit 68c9dbf
Showing 1 changed file with 11 additions and 0 deletions.
diff --git a/ScoutSuite/providers/gcp/rules/findings/cloudsql-instance-is-open-to-the-world.json b/ScoutSuite/providers/gcp/rules/findings/cloudsql-instance-is-open-to-the-world.json
@@ -0,0 +1,11 @@
+{
+  "description": "Instance allowing all incoming connections",
+  "Rationale": "Database instances should accept connections from trusted IPs and networks only (CIS 6.2).",
+  "dashboard_name": "Instances",
+  "path": "cloudsql.projects.id.instances.id.authorized_networks.id",
+  "display_path": "cloudsql.projects.id.instances.id",
+  "conditions": [ "and",
+    [ "cloudsql.projects.id.instances.id.authorized_networks.id.value", "match", ".*/0" ]
+  ],
+  "id_suffix": "open_to_the_world"
+}