Drata

For proper context, familiarize yourself with the <a href="https://help.drata.com/en/articles/4994112-gcp-connection-details">GCP connection</a> details before you begin.

- For proper context, familiarize yourself with the <a href="https://help.drata.com/en/articles/4994112-gcp-connection-details">GCP connection</a> details before you begin.

Summary of Monitor Tests Associated per each Permission

- 102 - <a href="https://help.drata.com/en/articles/4776976-test-public-ssh-denied">Public SSH Denied</a>
- 118 - <a href="https://help.drata.com/en/articles/4776997-test-infrastructure-instance-cpu-monitored">Infrastructure Instance CPU Monitored</a>
- 119 - <a href="https://help.drata.com/en/articles/4777002-test-firewall-default-disallows-traffic">Firewall Default Disallows Traffic</a>
- 122 - <a href="https://help.drata.com/en/articles/4777003-test-web-application-firewall-in-place">Web Application Firewall in Place</a>
- 130 - <a href="https://help.drata.com/en/articles/4777006-test-load-balancer-used">Load Balancer Used</a>

- 98 - <a href="https://help.drata.com/en/articles/4777045-test-employees-have-unique-infrastructure-accounts">Employees have Unique Infrastructure Accounts</a>
- 95 - <a href="https://help.drata.com/en/articles/4777040-test-infrastructure-accounts-properly-removed">Infrastructure Accounts Properly Removed</a>

- 88 - <a href="https://help.drata.com/en/articles/4777035-test-mfa-on-infrastructure-console">MFA on Infrastructure Console</a>

- 30 - <a href="https://help.drata.com/en/articles/4776928-test-availability-zones-used">Availability Zones Used</a>
- 68 - <a href="https://help.drata.com/en/articles/4776970-test-customer-data-is-encrypted-at-rest">Customer Data is Encrypted at Rest</a>
- 107 - <a href="https://help.drata.com/en/articles/4777050-test-daily-database-backups">Daily Database Backups</a>

Cloud Monitoring API (may also be called "Stackdriver Monitoring API")

- 112 - <a href="https://help.drata.com/en/articles/4776977-test-database-cpu-monitored">Database CPU Monitored</a>
- 113 - <a href="https://help.drata.com/en/articles/4776980-test-database-free-storage-space-monitored">Database Free Storage Space Monitored</a>
- 114 - <a href="https://help.drata.com/en/articles/4776984-test-database-read-i-o-monitored">Database Read I/O Monitored</a>
- 115 - <a href="https://help.drata.com/en/articles/4776986-test-messaging-queue-message-age-monitored">Messaging Queue Message Age Monitored</a>
- 117 - <a href="https://help.drata.com/en/articles/4776995-test-nosql-cluster-storage-utilization-monitored">NoSQL Cluster Storage Utilization Monitored</a>
- 118 - <a href="https://help.drata.com/en/articles/4776997-test-infrastructure-instance-cpu-monitored">Infrastructure Instance CPU Monitored</a>

Cloud Storage API (comes natively with the Project Viewer role)

- 108 - <a href="https://help.drata.com/en/articles/4778759-test-storage-data-versioned-or-retained">Storage Data Versioned or Retained</a>
- 104 - <a href="https://help.drata.com/en/articles/4777046-test-cloud-data-storage-exposure">Cloud Data Storage Exposure</a>
- 69 - <a href="https://help.drata.com/en/articles/4776971-test-customer-data-in-cloud-storage-is-encrypted-at-rest">Customer Data in Cloud Storage is Encrypted at Rest</a>

- 4 - <a href="https://help.drata.com/en/articles/4776882-test-ssl-tls-on-admin-page-of-infrastructure-console">SSL/TLS on Admin Page of Infrastructure Console</a>
  - Drata runs an SSL cert check on <a href="https://console.cloud.google.com" target="_blank" rel="nofollow noopener noreferrer">https://console.cloud.google.com</a>
- 123 - <a href="https://help.drata.com/en/articles/4778777-test-cloud-infrastructure-linked-to-drata">Cloud Infrastructure Linked to Drata</a>
  - A successful GCP connection satisfies this tes
- 124 - Root Infrastructure Account Unused - <i>Not implemented for GCP</i>

- Compute Engine API
  - 102 - <a href="https://help.drata.com/en/articles/4776976-test-public-ssh-denied">Public SSH Denied</a>
  - 118 - <a href="https://help.drata.com/en/articles/4776997-test-infrastructure-instance-cpu-monitored">Infrastructure Instance CPU Monitored</a>
  - 119 - <a href="https://help.drata.com/en/articles/4777002-test-firewall-default-disallows-traffic">Firewall Default Disallows Traffic</a>
  - 122 - <a href="https://help.drata.com/en/articles/4777003-test-web-application-firewall-in-place">Web Application Firewall in Place</a>
  - 130 - <a href="https://help.drata.com/en/articles/4777006-test-load-balancer-used">Load Balancer Used</a>
- Cloud Resource Manager API
  - 98 - <a href="https://help.drata.com/en/articles/4777045-test-employees-have-unique-infrastructure-accounts">Employees have Unique Infrastructure Accounts</a>
  - 95 - <a href="https://help.drata.com/en/articles/4777040-test-infrastructure-accounts-properly-removed">Infrastructure Accounts Properly Removed</a>
- Admin SDK API
  - 88 - <a href="https://help.drata.com/en/articles/4777035-test-mfa-on-infrastructure-console">MFA on Infrastructure Console</a>
- Cloud SQL Admin API
  - 30 - <a href="https://help.drata.com/en/articles/4776928-test-availability-zones-used">Availability Zones Used</a>
  - 68 - <a href="https://help.drata.com/en/articles/4776970-test-customer-data-is-encrypted-at-rest">Customer Data is Encrypted at Rest</a>
  - 107 - <a href="https://help.drata.com/en/articles/4777050-test-daily-database-backups">Daily Database Backups</a>
- Cloud Monitoring API (may also be called "Stackdriver Monitoring API")
  - 112 - <a href="https://help.drata.com/en/articles/4776977-test-database-cpu-monitored">Database CPU Monitored</a>
  - 113 - <a href="https://help.drata.com/en/articles/4776980-test-database-free-storage-space-monitored">Database Free Storage Space Monitored</a>
  - 114 - <a href="https://help.drata.com/en/articles/4776984-test-database-read-i-o-monitored">Database Read I/O Monitored</a>
  - 115 - <a href="https://help.drata.com/en/articles/4776986-test-messaging-queue-message-age-monitored">Messaging Queue Message Age Monitored</a>
  - 117 - <a href="https://help.drata.com/en/articles/4776995-test-nosql-cluster-storage-utilization-monitored">NoSQL Cluster Storage Utilization Monitored</a>
  - 118 - <a href="https://help.drata.com/en/articles/4776997-test-infrastructure-instance-cpu-monitored">Infrastructure Instance CPU Monitored</a>
- Cloud Storage API (comes natively with the Project Viewer role)
  - 108 - <a href="https://help.drata.com/en/articles/4778759-test-storage-data-versioned-or-retained">Storage Data Versioned or Retained</a>
  - 104 - <a href="https://help.drata.com/en/articles/4777046-test-cloud-data-storage-exposure">Cloud Data Storage Exposure</a>
  - 69 - <a href="https://help.drata.com/en/articles/4776971-test-customer-data-in-cloud-storage-is-encrypted-at-rest">Customer Data in Cloud Storage is Encrypted at Rest</a>
- Other
  - 4 - <a href="https://help.drata.com/en/articles/4776882-test-ssl-tls-on-admin-page-of-infrastructure-console">SSL/TLS on Admin Page of Infrastructure Console</a>
    - Drata runs an SSL cert check on <a href="https://console.cloud.google.com" target="_blank" rel="nofollow noopener noreferrer">https://console.cloud.google.com</a>
  - 123 - <a href="https://help.drata.com/en/articles/4778777-test-cloud-infrastructure-linked-to-drata">Cloud Infrastructure Linked to Drata</a>
    - A successful GCP connection satisfies this tes
  - 124 - Root Infrastructure Account Unused - <i>Not implemented for GCP</i>

BEFORE DIVING IN