Query: Compute Instance template IP forwarding should be disabled

Description

Compute Engine instance template cannot forward a packet unless the source IP address of the packet matches the IP address of the instance. Similarly, GCP won't deliver a packet whose destination IP address is different than the IP address of the instance receiving the packet. However, both capabilities are required if you want to use instances to help route packets.

Query

Tables used in this query:

• gcp_compute_instance_template

Controls using this query:

• Compute Instance template IP forwarding should be disabled

SQL