Interpretation of the Columns in Benchmark Compliance Rules:
Rule ID: A unique identifier for the specific security rule or check
Title: A brief description of the security issue or misconfiguration
Severity — Low to High: Determines the risk of being exposed to attacks
Service Type: The AWS service affected or evaluated by the rule
Resource Type: The specific AWS resource being audited
| Rule ID | Title | Severity | Service Type | Resource Type |
|---|---|---|---|---|
| CSPM-GCP-2025-0002-01 | OS Login Disabled on Compute Instances | High | ComputeEngine | VMInstances |
| CSPM-GCP-2025-0003 | Datasets Publicly Accessible | Critical | BigQuery | Datasets |
| CSPM-GCP-2025-0006 | Cloud SQL Instances Without Automated Backup Configuration | High | Cloud SQL | Instances |
| CSPM-GCP-2025-0010 | Cloud SQL Instances Not Enforcing TLS/SSL Client Connections | High | Cloud SQL | Instances |
| CSPM-GCP-2025-0013 | MySQL Local Infile Flag Enabled | Medium | Cloud SQL | Instances |
| CSPM-GCP-2025-0018 | Log Min Duration Statement Database Flag for PostgreSQL Instance Is not set to -1 | High | Cloud SQL | Instances |
| CSPM-GCP-2025-0035 | Block Project-Wide SSH Keys is not Enabled | High | ComputeEngine | VMInstances |
| CSPM-GCP-2025-0036 | Serial Port Access is Enabled | High | ComputeEngine | VMInstances |
| CSPM-GCP-2025-0044 | Shielded VM Disabled | Medium | ComputeEngine | VMInstances |
| CSPM-GCP-2025-0057 | Potential Secrets in Function Environment Variables (Gen 1) | Medium | Cloud Functions | Functions |
| CSPM-GCP-2025-0122 | Confidential Computing disabled | Medium | ComputeEngine | VMInstances |
| CSPM-GCP-2025-0176 | PostgreSQL PGAudit Extension not enabled | Medium | Cloud SQL | Instances |
| CSPM-GCP-2025-0008 | Cloud SQL Public Internet Access | Critical | Cloud SQL | Instances |
| CSPM-GCP-2025-0019 | Log Min Error Statement Database Flag for PostgreSQL Instance is Not Set to ERROR | Medium | Cloud SQL | Instances |
| CSPM-GCP-2025-0020 | SQL Server Instances with Remote Access Enabled | High | Cloud SQL | Instances |
| CSPM-GCP-2025-0021 | SQL Server Contained Database Authentication Enabled | Medium | Cloud SQL | Instances |
| CSPM-GCP-2025-0022 | Cross DB Ownership Chaining Enabled for SQL Server Instance | High | Cloud SQL | Instances |
| CSPM-GCP-2025-0023 | Cloud Storage Bucket Accessible by “ARG_0“ | Critical | Cloud Storage Global | BucketPolicy |
| CSPM-GCP-2025-0027 | Cloud Storage Buckets without Uniform Bucket-Level Access | High | Cloud Storage | Buckets |
| CSPM-GCP-2025-0041 | Ensure that IP forwarding is not enabled on instances | High | ComputeEngine | VMInstances |
| CSPM-GCP-2025-0057 | Potential Secrets in Function Environment Variables (Gen 1) | Medium | Cloud Functions | Functions |
| CSPM-GCP-2025-0074-01 | KMS Encryption Not Rotated within 90 Days | Medium | Cloud KMS | Keys |
| CSPM-GCP-2025-0164 | MySQL Skip Show Database Flag Not Enabled | Medium | Cloud SQL | Instances |
| CSPM-GCP-2025-0167 | PostgreSQL Log Error Verbosity Misconfigured | Medium | Cloud SQL | Instances |
| CSPM-GCP-2025-0168 | Log Min Messages Flag Not Properly Configured for PostgreSQL Instance | Medium | Cloud SQL | Instances |
| CSPM-GCP-2025-0169 | Log Statement Flag Not Properly Configured for PostgreSQL Instance | Medium | Cloud SQL | Instances |
| CSPM-GCP-2025-0174 | Log Statement Flag Not Properly Configured for PostgreSQL Instance | Medium | Cloud SQL | Instances |
| CSPM-GCP-2025-0176 | PostgreSQL PGAudit Extension Not Enabled | Medium | Cloud SQL | Instances |
| CSPM-GCP-2025-0178 | PostgreSQL Hostname Logging Disabled | Medium | Cloud SQL | Instances |
| CSPM-GCP-2025-0179 | User Connections Flag Configured for SQL Server Instance | Medium | Cloud SQL | Instances |
| CSPM-GCP-2025-0180 | SQL Server External Scripts Execution Enabled | Medium | Cloud SQL | Instances |
| CSPM-GCP-2025-0181 | SQL Server Trace Flag 3625 Not Enabled | Medium | Cloud SQL | Instances |
| CSPM-GCP-2025-0272 | Ensure That Instances Are Not Configured To Use the Default Service Account With Full Access to All Cloud APIs | High | ComputeEngine | VMInstances |
