Control: Compute Instance template IP forwarding should be disabled
Description
Compute Engine instance template cannot forward a packet unless the source IP address of the packet matches the IP address of the instance. Similarly, GCP won't deliver a packet whose destination IP address is different than the IP address of the instance receiving the packet. However, both capabilities are required if you want to use instances to help route packets.
Usage
Run the control in your terminal:
powerpipe control run gcp_compliance.control.compute_instance_template_ip_forwarding_disabledSnapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run gcp_compliance.control.compute_instance_template_ip_forwarding_disabled --shareSQL
This control uses a named query:
compute_instance_template_ip_forwarding_disabled