Logging and monitoring

No monitoring for VPC network changes

Risk Level

Informational (4)

Platform(s)
Compliance Frameworks

Description

It is recommended that a metric filter and alarm be established for Virtual Private Cloud (VPC) network changes. Monitoring changes to a VPC will help ensure VPC traffic flow is not getting impacted.
  • Recommended Mitigation

    In the User-defined Metrics section, ensure that at least one metric is present with filter text: resource.type=gce_network AND jsonPayload.event_subtype=""compute.networks.insert"" OR jsonPayload.event_subtype=""compute.networks.patch"" OR jsonPayload.event_subtype=""compute.networks.delete"" OR jsonPayload.event_subtype=""compute.networks.removePeering"" OR jsonPayload.event_subtype=""compute.networks.addPeering""