Checks Performed
- Compute Instances Should Not Have Public IPs
- Customer Supplied Encryption Key Should Be Enabled For Disks
- Ensure That Compute Instances Have Confidential Computing Enabled
- Instances Should Be Multi AZ
- IP Forwarding Should Be Disabled
- OS Login Should Be Enabled
- Serial Ports Connection Should Be Disabled
- Shielded VM Should Be Enabled For Compute Instances
- SSH Keys Should Be Instance Specific
- Total Resources Should Be Under Per Account Limit
- Total VMs Should Not Exceed Threshold
- VM Instances Should Not Use Default Service Account
- VM Instances Should Not Use Default Service Accounts With Full Access To Cloud APIs