| Rule Id | Title | Affected Service |
|---|---|---|
| CSPA-GCP-2025-0001 | Unusual types of GCP Compute Instances | ComputeEngine |
| CSPA-GCP-2025-0002 | IAM Group with Anomalous Number of Members | IAM |
| CSPA-GCP-2025-0003 | Firewall Rule allows Unrestricted Ingress from the Internet | Network Security |
| CSPA-GCP-2025-0004 | GKE Cluster with Public Master Endpoint exposed | Kubernetes Engine |
| CSPA-GCP-2025-0005 | Newly created Compute Disk detected | ComputeEngine |
| CSPA-GCP-2025-0006 | Newly created Project detected | Cloud Resource Manager |
| CSPA-GCP-2025-0007 | Newly created folder detected | Cloud Resource Manager |
| CSPA-GCP-2025-0008 | Dormant User Account detected (Over 90 Days) | IAM |
| CSPA-GCP-2025-0009 | Newly created Firewalls detected | Network Security |
| CSPA-GCP-2025-0010 | Cloud SQL Instance does not Enforce SSL | Cloud SQL |
| CSPA-GCP-2025-0011 | Newly created Cloud SQL instance detected | Cloud SQL |
| CSPA-GCP-2025-0012 | Newly created logging metric detected | Logging |
| CSPA-GCP-2025-0013 | Stale logging metric definition detected | Logging |
| CSPA-GCP-2025-0014 | Unusually large disk size | ComputeEngine |
| CSPA-GCP-2025-0015 | Unusual Machine Cores in Compute instances | ComputeEngine |
| CSPA-GCP-2025-0016 | Unusual Cloud SQL Database version | Cloud SQL |
| CSPA-GCP-2025-0017 | GKE Cluster with unusually High Node count | Kubernetes Engine |
| CSPA-GCP-2025-0018 | Unusual Memory Size in Redis instances | Cloud Memorystore |
| CSPA-GCP-2025-0019 | Unusual Storage Bucket location | Cloud Storage |
| CSPA-GCP-2025-0020 | Unusual Storage Class configuration | Cloud Storage |
| CSPA-GCP-2025-0021 | Unusual Cloud Function Runtime | Cloud Functions |
| CSPA-GCP-2025-0022 | Unusual Cloud SQL Instance Tier | Cloud SQL |
| CSPA-GCP-2025-0023 | Compute Instance with unusual number of attached disks | ComputeEngine |
| CSPA-GCP-2025-0024 | GKE Cluster with unusual Kubernetes Version | Kubernetes Engine |
| CSPA-GCP-2025-0025 | Cloud SQL with unusual Availability Type | Cloud SQL |
| CSPA-GCP-2025-0026 | Compute Instance with unusual Network Interface Count | ComputeEngine |
| CSPA-GCP-2025-0027 | Cloud Functions with unusual Timeout Setting | Cloud Functions |
| CSPA-GCP-2025-0028 | Cloud SQL with unusually Large Storage Size | Cloud SQL |
| CSPA-GCP-2025-0029 | GKE Cluster with unusual Location Type | Kubernetes Engine |
| CSPA-GCP-2025-0030 | Compute Instance with unusual Preemptibility Status | ComputeEngine |
| CSPA-GCP-2025-0031 | Cloud Functions with unusually High Memory Allocation | Cloud Functions |
| CSPA-GCP-2025-0032 | Memorystore Redis with Unusual Redis Version | Cloud Memorystore |
| CSPA-GCP-2025-0033 | Cloud Storage Bucket without Uniform Bucket-Level Access | Cloud Storage |
| CSPA-GCP-2025-0034 | Cloud KMS Key without Rotation Policy | Cloud KMS |
| CSPA-GCP-2025-0035 | BigQuery Dataset without Default Table Expiration | BigQuery |
| CSPA-GCP-2025-0036 | Pub/Sub Topic allows Unauthenticated Access | Pub/Sub |
| CSPA-GCP-2025-0037 | Cloud Run Service Allows Public Unauthenticated Access | CloudRun |
| CSPA-GCP-2025-0038 | Compute Instance without Secure Boot enabled | ComputeEngine |
| CSPA-GCP-2025-0039 | Cloud SQL Instance without Automated Backups Enabled | Cloud SQL |
| CSPA-GCP-2025-0040 | User-Managed Service Account Key older than 90 Days | IAM |
| CSPA-GCP-2025-0041 | GKE Cluster without Network Policy enabled | Kubernetes Engine |
| CSPA-GCP-2025-0042 | Compute Instance with External IP Address | ComputeEngine |
| CSPA-GCP-2025-0043 | Cloud Storage Bucket without Public Access Prevention | Cloud Storage |
| CSPA-GCP-2025-0044 | Firewall Rule with unusually High Number of allowed Protocols | Network Security |
| CSPA-GCP-2025-0045 | Load Balancer Backend Service with unusual Backend Count | ComputeEngineGlobal |
| CSPA-GCP-2025-0046 | Cloud Function allows Unauthenticated Invocation | Cloud Functions |
| CSPA-GCP-2025-0047 | Secret Manager Secret without Automatic Rotation | Secret Manager |
| CSPA-GCP-2025-0048 | GKE Node Pool with unusually High Autoscaling Maximum Node Count | Kubernetes Engine |
| CSPA-GCP-2025-0049 | Compute Instance with unusually Large Boot Disk Size | ComputeEngine |
| CSPA-GCP-2025-0050 | Cloud Storage Bucket with unusual Age | Cloud Storage |
