turbot/gcp_compliance

Query: compute_instance_ip_forwarding_disabled

Usage

powerpipe query gcp_compliance.query.compute_instance_ip_forwarding_disabled

Steampipe Tables

SQL

select
self_link resource,
case
when name like 'gke-%'
and labels ? 'goog-gke-node' then 'skip'
when can_ip_forward then 'alarm'
else 'ok'
end as status,
case
when name like 'gke-%'
and labels ? 'goog-gke-node' then title || ' created by GKE.'
when can_ip_forward then title || ' IP forwarding enabled.'
else title || ' IP forwarding not enabled.'
end as reason,
location as location,
project as project
from
gcp_compute_instance;

Controls

The query is being used by the following controls: