Control: Ensure that IP forwarding is not enabled on Instances
Compute Engine instance cannot forward a packet unless the source IP address of the packet matches the IP address of the instance. Similarly, GCP won't deliver a packet whose destination IP address is different than the IP address of the instance receiving the packet. However, both capabilities are required if you want to use instances to help route packets.
Run the control in your terminal:
steampipe check terraform_gcp_compliance.control.compute_instance_ip_forwarding_disabled
Snapshot and share results via Steampipe Cloud:
steampipe loginsteampipe check --share terraform_gcp_compliance.control.compute_instance_ip_forwarding_disabled
This control uses a named query:compute_instance_ip_forwarding_disabled