Assured Workloads cloud controls

This page provides reference content for the built-in cloud controls that are included in Assured Workloads frameworks. Cloud controls can apply to folders or projects.

Google Cloud cloud controls

Activate Security Command Center

Activate Security Command Center to evaluate security and data attack surfaces and help mitigate and remediate risks related to misconfigurations, vulnerabilities, and threats.

Enforcement mode	Audit
Finding category	SCC_NOT_ACTIVATED
Revision number	1
Supported target resources	Organization Folder Project

Remediation steps

To activate Security Command Center, see Overview of activating Security Command Center.

Activate Security Command Center for Continuous Monitoring

Use Security Command Center to define security policies and deploy and monitor them.

Enforcement mode	Audit
Finding category	SECURITY_COMMAND_CENTER_NOT_ACTIVATED
Revision number	1
Supported target resources	Organization Folder Project

Remediation steps

Complete the following:

• Activate Security Command Center.

• Create and deploy frameworks with cloud controls that align with your security policies.

• Review and resolve findings.

• Integrate with notification channels such as email and chat.

Allocate Audit Log Storage Capacity

Allocate sufficient audit log storage capacity to accommodate audit logs

Enforcement mode	Detective Audit
Severity	LOW
Finding category	INSUFFICIENT_AUDIT_LOG_STORAGE
Revision number	2
Supported target resources