Query: Ensure that Cloud DNS logging is enabled for all VPC networks

Description

Cloud DNS logging records the queries from the name servers within your VPC to Stackdriver. Logged queries can come from Compute Engine VMs, GKE containers, or other GCP resources provisioned within the VPC.

Query

Tables used in this query:

• gcp_compute_network
• gcp_dns_policy

Controls using this query:

• 2.12 Ensure that Cloud DNS logging is enabled for all VPC networks
• 2.12 Ensure that Cloud DNS logging is enabled for all VPC networks
• 2.12 Ensure that Cloud DNS logging is enabled for all VPC networks
• 2.12 Ensure That Cloud DNS Logging Is Enabled for All VPC Networks
• Ensure that Cloud DNS logging is enabled for all VPC networks

SQL