Skip to content
This repository has been archived by the owner on Jun 25, 2024. It is now read-only.

Commit

Permalink
Merge pull request #585 from JupiterOne/mikiodehartj1-patch-1
Browse files Browse the repository at this point in the history
Add mappings 1.1-3.4
  • Loading branch information
jzolo22 authored Dec 20, 2023
2 parents 4d52964 + e5967b1 commit edfcfe3
Showing 1 changed file with 83 additions and 5 deletions.
88 changes: 83 additions & 5 deletions jupiterone/questions/questions.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -129,6 +129,15 @@ questions:
- access
compliance:
- standard: CIS Google Cloud Foundations 1.1
version: v1.1.0
requirements:
- '1.1'
- standard: CIS Google Cloud Platform Foundation Benchmark 1.3
version: v1.3.0
requirements:
- '1.1'
- standard: CIS Google Cloud Platform Foundation Benchmark 2.0.0
version: v2.0.0
requirements:
- '1.1'

Expand Down Expand Up @@ -173,7 +182,16 @@ questions:
- access
- iam
compliance:
- standard: CIS Google Cloud Foundations 1.1
- standard: CIS Google Cloud Foundations 1.2
version: v1.1.0
requirements:
- '1.4'
- standard: CIS Google Cloud Platform Foundation Benchmark 1.3
version: v1.3.0
requirements:
- '1.4'
- standard: CIS Google Cloud Platform Foundation Benchmark 2.0.0
version: v2.0.0
requirements:
- '1.4'
- standard: CIS Google Cloud Foundations 1.3
Expand Down Expand Up @@ -232,7 +250,14 @@ questions:
- standard: CIS Google Cloud Foundations 1.1
requirements:
- '1.5'

- standard: CIS Google Cloud Platform Foundation Benchmark 1.3
version: v1.3.0
requirements:
- '1.5'
- standard: CIS Google Cloud Platform Foundation Benchmark 2.0.0
version: v2.0.0
requirements:
- '1.5'
- id: integration-question-google-cloud-iam-not-assigned-user-token-roles-project-level
title: Ensure that IAM users are not assigned the Service Account User or Service Account Token Creator roles at project level
description: >
Expand Down Expand Up @@ -274,7 +299,14 @@ questions:
- standard: CIS Google Cloud Foundations 1.1
requirements:
- '1.6'

- standard: CIS Google Cloud Platform Foundation Benchmark 1.3
version: v1.3.0
requirements:
- '1.6'
- standard: CIS Google Cloud Platform Foundation Benchmark 2.0.0
version: v2.0.0
requirements:
- '1.6'
- id: integration-question-google-cloud-user-managed-external-keys-service-account-rotation-period
title: Ensure user-managed/external keys for service accounts are rotated every 90 days or less
description: >
Expand Down Expand Up @@ -307,7 +339,14 @@ questions:
- standard: CIS Google Cloud Foundations 1.1
requirements:
- '1.7'

- standard: CIS Google Cloud Platform Foundation Benchmark 1.3
version: v1.3.0
requirements:
- '1.7'
- standard: CIS Google Cloud Platform Foundation Benchmark 2.0.0
version: v2.0.0
requirements:
- '1.7'
- id: integration-question-google-cloud-encryption-keys-publicly-accessible
title: Are there Cloud KMS crypto keys that are publicly accessible?
description: >
Expand All @@ -326,6 +365,14 @@ questions:
- standard: CIS Google Cloud Foundations 1.1
requirements:
- '1.9'
- standard: CIS Google Cloud Platform Foundation Benchmark 1.3
version: v1.3.0
requirements:
- '1.9'
- standard: CIS Google Cloud Platform Foundation Benchmark 2.0.0
version: v2.0.0
requirements:
- '1.9'

- id: integration-question-google-cloud-encryption-keys-rotation-period
title: Ensure encryption keys are rotated within a period of 365 days
Expand Down Expand Up @@ -371,6 +418,14 @@ questions:
- standard: CIS Google Cloud Foundations 1.1
requirements:
- '1.10'
- standard: CIS Google Cloud Platform Foundation Benchmark 1.3
version: v1.3.0
requirements:
- '1.10'
- standard: CIS Google Cloud Platform Foundation Benchmark 2.0.0
version: v2.0.0
requirements:
- '1.10'

- id: integration-question-google-cloud-iam-all-user-policies
title: Which policies are bound to “allUsers” or “allAuthenticatedUsers”?
Expand Down Expand Up @@ -481,7 +536,14 @@ questions:
- standard: CIS Google Cloud Foundations 1.1
requirements:
- '3.1'

- standard: CIS Google Cloud Platform Foundation Benchmark 1.3
version: v1.3.0
requirements:
- '3.1'
- standard: CIS Google Cloud Platform Foundation Benchmark 2.0.0
version: v2.0.0
requirements:
- '3.1'
- id: integration-question-google-cloud-dnssec-enabled-cloud-dns
title: Are Domain Name System Security Extensions (DNSSEC) enabled for Cloud DNS?
description: >
Expand All @@ -499,6 +561,14 @@ questions:
- standard: CIS Google Cloud Foundations 1.1
requirements:
- '3.3'
- standard: CIS Google Cloud Platform Foundation Benchmark 1.3
version: v1.3.0
requirements:
- '3.3'
- standard: CIS Google Cloud Platform Foundation Benchmark 2.0.0
version: v2.0.0
requirements:
- '3.3'

- id: integration-question-google-cloud-dns-dnssec-key-signing-key-insecure-algo
title: Are my key-signing keys used in Cloud DNS DNSSEC using an insecure algorithm?
Expand All @@ -517,6 +587,14 @@ questions:
- standard: CIS Google Cloud Foundations 1.1
requirements:
- '3.4'
- standard: CIS Google Cloud Platform Foundation Benchmark 1.3
version: v1.3.0
requirements:
- '3.4'
- standard: CIS Google Cloud Platform Foundation Benchmark 2.0.0
version: v2.0.0
requirements:
- '3.4'

- id: integration-question-google-cloud-dns-dnssec-zone-signing-key-insecure-algo
title: Are my zone-signing keys used in Cloud DNS DNSSEC using an insecure algorithm?
Expand Down

0 comments on commit edfcfe3

Please sign in to comment.