Skip to content
This repository has been archived by the owner on Jun 25, 2024. It is now read-only.

Add mappings 1.1-3.4 #585

Merged
merged 1 commit into from
Dec 20, 2023
Merged
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
88 changes: 83 additions & 5 deletions jupiterone/questions/questions.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -129,6 +129,15 @@ questions:
- access
compliance:
- standard: CIS Google Cloud Foundations 1.1
version: v1.1.0
requirements:
- '1.1'
- standard: CIS Google Cloud Platform Foundation Benchmark 1.3
version: v1.3.0
requirements:
- '1.1'
- standard: CIS Google Cloud Platform Foundation Benchmark 2.0.0
version: v2.0.0
requirements:
- '1.1'

Expand Down Expand Up @@ -173,7 +182,16 @@ questions:
- access
- iam
compliance:
- standard: CIS Google Cloud Foundations 1.1
- standard: CIS Google Cloud Foundations 1.2
version: v1.1.0
requirements:
- '1.4'
- standard: CIS Google Cloud Platform Foundation Benchmark 1.3
version: v1.3.0
requirements:
- '1.4'
- standard: CIS Google Cloud Platform Foundation Benchmark 2.0.0
version: v2.0.0
requirements:
- '1.4'

Expand Down Expand Up @@ -226,7 +244,14 @@ questions:
- standard: CIS Google Cloud Foundations 1.1
requirements:
- '1.5'

- standard: CIS Google Cloud Platform Foundation Benchmark 1.3
version: v1.3.0
requirements:
- '1.5'
- standard: CIS Google Cloud Platform Foundation Benchmark 2.0.0
version: v2.0.0
requirements:
- '1.5'
- id: integration-question-google-cloud-iam-not-assigned-user-token-roles-project-level
title: Ensure that IAM users are not assigned the Service Account User or Service Account Token Creator roles at project level
description: >
Expand Down Expand Up @@ -268,7 +293,14 @@ questions:
- standard: CIS Google Cloud Foundations 1.1
requirements:
- '1.6'

- standard: CIS Google Cloud Platform Foundation Benchmark 1.3
version: v1.3.0
requirements:
- '1.6'
- standard: CIS Google Cloud Platform Foundation Benchmark 2.0.0
version: v2.0.0
requirements:
- '1.6'
- id: integration-question-google-cloud-user-managed-external-keys-service-account-rotation-period
title: Ensure user-managed/external keys for service accounts are rotated every 90 days or less
description: >
Expand Down Expand Up @@ -301,7 +333,14 @@ questions:
- standard: CIS Google Cloud Foundations 1.1
requirements:
- '1.7'

- standard: CIS Google Cloud Platform Foundation Benchmark 1.3
version: v1.3.0
requirements:
- '1.7'
- standard: CIS Google Cloud Platform Foundation Benchmark 2.0.0
version: v2.0.0
requirements:
- '1.7'
- id: integration-question-google-cloud-encryption-keys-publicly-accessible
title: Are there Cloud KMS crypto keys that are publicly accessible?
description: >
Expand All @@ -320,6 +359,14 @@ questions:
- standard: CIS Google Cloud Foundations 1.1
requirements:
- '1.9'
- standard: CIS Google Cloud Platform Foundation Benchmark 1.3
version: v1.3.0
requirements:
- '1.9'
- standard: CIS Google Cloud Platform Foundation Benchmark 2.0.0
version: v2.0.0
requirements:
- '1.9'

- id: integration-question-google-cloud-encryption-keys-rotation-period
title: Ensure encryption keys are rotated within a period of 365 days
Expand Down Expand Up @@ -365,6 +412,14 @@ questions:
- standard: CIS Google Cloud Foundations 1.1
requirements:
- '1.10'
- standard: CIS Google Cloud Platform Foundation Benchmark 1.3
version: v1.3.0
requirements:
- '1.10'
- standard: CIS Google Cloud Platform Foundation Benchmark 2.0.0
version: v2.0.0
requirements:
- '1.10'

- id: integration-question-google-cloud-iam-all-user-policies
title: Which policies are bound to “allUsers” or “allAuthenticatedUsers”?
Expand Down Expand Up @@ -475,7 +530,14 @@ questions:
- standard: CIS Google Cloud Foundations 1.1
requirements:
- '3.1'

- standard: CIS Google Cloud Platform Foundation Benchmark 1.3
version: v1.3.0
requirements:
- '3.1'
- standard: CIS Google Cloud Platform Foundation Benchmark 2.0.0
version: v2.0.0
requirements:
- '3.1'
- id: integration-question-google-cloud-dnssec-enabled-cloud-dns
title: Are Domain Name System Security Extensions (DNSSEC) enabled for Cloud DNS?
description: >
Expand All @@ -493,6 +555,14 @@ questions:
- standard: CIS Google Cloud Foundations 1.1
requirements:
- '3.3'
- standard: CIS Google Cloud Platform Foundation Benchmark 1.3
version: v1.3.0
requirements:
- '3.3'
- standard: CIS Google Cloud Platform Foundation Benchmark 2.0.0
version: v2.0.0
requirements:
- '3.3'

- id: integration-question-google-cloud-dns-dnssec-key-signing-key-insecure-algo
title: Are my key-signing keys used in Cloud DNS DNSSEC using an insecure algorithm?
Expand All @@ -511,6 +581,14 @@ questions:
- standard: CIS Google Cloud Foundations 1.1
requirements:
- '3.4'
- standard: CIS Google Cloud Platform Foundation Benchmark 1.3
version: v1.3.0
requirements:
- '3.4'
- standard: CIS Google Cloud Platform Foundation Benchmark 2.0.0
version: v2.0.0
requirements:
- '3.4'

- id: integration-question-google-cloud-dns-dnssec-zone-signing-key-insecure-algo
title: Are my zone-signing keys used in Cloud DNS DNSSEC using an insecure algorithm?
Expand Down