Homepage
About Snyk

The default network for a project should be deleted Affecting Network service in Google

Severity

0.0
medium
0
10
    Severity Framework
    Snyk CCSS
    Rule category
    Network / Network

Is your enviroment affected by this misconfiguration?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
    Frameworks
    CIS-Controls CIS-Google CSA-CCM ISO-27001 NIST-800-53 PCI-DSS SOC-2
  • Snyk ID SNYK-CC-00387
  • credit Snyk Research Team
Report a new misconfiguration Found a mistake?

Description

The default network for a project should be deleted. The default network for a project automatically generates the insecure firewall rules default-allow-internal, default-allow-ssh, default-allow-rdp, and default-allow-icmp. These rules can't be configured to allow firewall rule logging. Instead, it is recommended to create a new network and delete the default one.

How to fix?

The default network for a project should be deleted.

Example Configuration

resource "google_compute_network" "allowed" {
  name = "test-network"
  description = "This is a test network"
}