Skip to content

Commit a80ee47

Browse files
Add missing NIST 800-53 tags
1 parent a3f68f6 commit a80ee47

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

54 files changed

+62
-54
lines changed

controls/1.01-iam.rb

+1-1
Original file line numberDiff line numberDiff line change
@@ -35,7 +35,7 @@
3535
tag cis_gcp: control_id.to_s
3636
tag cis_version: cis_version.to_s
3737
tag project: gcp_project_id.to_s
38-
tag nist: ["AC-3"]
38+
tag nist: ['AC-2']
3939

4040
ref 'CIS Benchmark', url: cis_url.to_s
4141
ref 'GCP Docs', url: 'https://cloud.google.com/docs/enterprise/best-practices-for-enterprise-organizations#use_corporate_login_credentials'

controls/1.02-iam.rb

+1-1
Original file line numberDiff line numberDiff line change
@@ -33,7 +33,7 @@
3333
tag cis_gcp: control_id.to_s
3434
tag cis_version: cis_version.to_s
3535
tag project: gcp_project_id.to_s
36-
tag nist: ["IA-2"]
36+
tag nist: ['IA-2']
3737

3838
ref 'CIS Benchmark', url: cis_url.to_s
3939
ref 'GCP Docs', url: 'https://cloud.google.com/solutions/securing-gcp-account-u2f'

controls/1.03-iam.rb

+1-1
Original file line numberDiff line numberDiff line change
@@ -33,7 +33,7 @@
3333
tag cis_gcp: control_id.to_s
3434
tag cis_version: cis_version.to_s
3535
tag project: gcp_project_id.to_s
36-
tag nist: []
36+
tag nist: ['IA-2']
3737

3838
ref 'CIS Benchmark', url: cis_url.to_s
3939
ref 'GCP Docs', url: 'https://cloud.google.com/security-key/'

controls/1.04-iam.rb

+1-1
Original file line numberDiff line numberDiff line change
@@ -45,7 +45,7 @@
4545
tag cis_gcp: control_id.to_s
4646
tag cis_version: cis_version.to_s
4747
tag project: gcp_project_id.to_s
48-
tag nist: []
48+
tag nist: ['AC-2']
4949

5050
ref 'CIS Benchmark', url: cis_url.to_s
5151
ref 'GCP Docs', url: 'https://cloud.google.com/iam/docs/understanding-service-accounts#managing_service_account_keys'

controls/1.05-iam.rb

+1-1
Original file line numberDiff line numberDiff line change
@@ -36,7 +36,7 @@
3636
tag cis_gcp: control_id.to_s
3737
tag cis_version: cis_version.to_s
3838
tag project: gcp_project_id.to_s
39-
tag nist: ["AC-6"]
39+
tag nist: ['AC-2']
4040

4141
ref 'CIS Benchmark', url: cis_url.to_s
4242
ref 'GCP Docs', url: 'https://cloud.google.com/sdk/gcloud/reference/iam/service-accounts/'

controls/1.06-iam.rb

+1-1
Original file line numberDiff line numberDiff line change
@@ -42,7 +42,7 @@
4242
tag cis_gcp: control_id.to_s
4343
tag cis_version: cis_version.to_s
4444
tag project: gcp_project_id.to_s
45-
tag nist: ["AC-6"]
45+
tag nist: %w[AC-2 AC-3]
4646

4747
ref 'CIS Benchmark', url: cis_url.to_s
4848
ref 'GCP Docs', url: 'https://cloud.google.com/iam/docs/service-accounts'

controls/1.07-iam.rb

+1-1
Original file line numberDiff line numberDiff line change
@@ -40,7 +40,7 @@
4040
tag cis_gcp: control_id.to_s
4141
tag cis_version: cis_version.to_s
4242
tag project: gcp_project_id.to_s
43-
tag nist: ["SC-12"]
43+
tag nist: ['AC-2']
4444

4545
ref 'CIS Benchmark', url: cis_url.to_s
4646
ref 'GCP Docs', url: 'https://cloud.google.com/iam/docs/understanding-service-accounts#managing_service_account_keys'

controls/1.08-iam.rb

+1-1
Original file line numberDiff line numberDiff line change
@@ -39,7 +39,7 @@
3939
tag cis_gcp: control_id.to_s
4040
tag cis_version: cis_version.to_s
4141
tag project: gcp_project_id.to_s
42-
tag nist: ["AC-5"]
42+
tag nist: %w[AC-2 AC-3]
4343

4444
ref 'CIS Benchmark', url: cis_url.to_s
4545
ref 'GCP Docs', url: 'https://cloud.google.com/iam/docs/service-accounts'

controls/1.09-iam.rb

+1-1
Original file line numberDiff line numberDiff line change
@@ -34,7 +34,7 @@
3434
tag cis_gcp: control_id.to_s
3535
tag cis_version: cis_version.to_s
3636
tag project: gcp_project_id.to_s
37-
tag nist: ["AC-5"]
37+
tag nist: ['AC-3']
3838

3939
ref 'CIS Benchmark', url: cis_url.to_s
4040
ref 'GCP Docs', url: 'https://cloud.google.com/kms/docs/key-rotation#frequency_of_key_rotation'

controls/1.10-iam.rb

+1-1
Original file line numberDiff line numberDiff line change
@@ -41,7 +41,7 @@
4141
tag cis_gcp: control_id.to_s
4242
tag cis_version: cis_version.to_s
4343
tag project: gcp_project_id.to_s
44-
tag nist: ["SC-12"]
44+
tag nist: ['AC-2']
4545

4646
ref 'CIS Benchmark', url: cis_url.to_s
4747
ref 'GCP Docs', url: 'https://cloud.google.com/kms/docs/key-rotation#frequency_of_key_rotation'

controls/1.11-iam.rb

+1-1
Original file line numberDiff line numberDiff line change
@@ -38,7 +38,7 @@
3838
tag cis_gcp: control_id.to_s
3939
tag cis_version: cis_version.to_s
4040
tag project: gcp_project_id.to_s
41-
tag nist: ["AC-5"]
41+
tag nist: %w[AC-2 AC-3 AC-6]
4242

4343
ref 'CIS Benchmark', url: cis_url.to_s
4444
ref 'GCP Docs', url: 'https://cloud.google.com/kms/docs/separation-of-duties'

controls/1.12-iam.rb

+1-1
Original file line numberDiff line numberDiff line change
@@ -40,7 +40,7 @@
4040
tag cis_gcp: control_id.to_s
4141
tag cis_version: cis_version.to_s
4242
tag project: gcp_project_id.to_s
43-
tag nist: []
43+
tag nist: ['AC-2']
4444

4545
ref 'CIS Benchmark', url: cis_url.to_s
4646
ref 'GCP Docs', url: 'https://cloud.google.com/docs/authentication/api-keys'

controls/1.13-iam.rb

+1-1
Original file line numberDiff line numberDiff line change
@@ -41,7 +41,7 @@
4141
tag cis_gcp: control_id.to_s
4242
tag cis_version: cis_version.to_s
4343
tag project: gcp_project_id.to_s
44-
tag nist: []
44+
tag nist: ['AC-2']
4545

4646
ref 'CIS Benchmark', url: cis_url.to_s
4747
ref 'GCP Docs', url: 'https://cloud.google.com/docs/authentication/api-keys'

controls/1.14-iam.rb

+1-1
Original file line numberDiff line numberDiff line change
@@ -42,7 +42,7 @@
4242
tag cis_gcp: control_id.to_s
4343
tag cis_version: cis_version.to_s
4444
tag project: gcp_project_id.to_s
45-
tag nist: []
45+
tag nist: ['AC-2']
4646

4747
ref 'CIS Benchmark', url: cis_url.to_s
4848
ref 'GCP Docs', url: 'https://cloud.google.com/docs/authentication/api-keys'

controls/1.15-iam.rb

+1-1
Original file line numberDiff line numberDiff line change
@@ -41,7 +41,7 @@
4141
tag cis_gcp: control_id.to_s
4242
tag cis_version: cis_version.to_s
4343
tag project: gcp_project_id.to_s
44-
tag nist: []
44+
tag nist: ['AC-2']
4545

4646
ref 'CIS Benchmark', url: cis_url.to_s
4747

controls/2.01-logging.rb

+1-1
Original file line numberDiff line numberDiff line change
@@ -50,7 +50,7 @@
5050
tag cis_gcp: control_id.to_s
5151
tag cis_version: cis_version.to_s
5252
tag project: gcp_project_id.to_s
53-
tag nist: ["AC-2", "AU-2"]
53+
tag nist: %w[AU-6 AU-12]
5454

5555
ref 'CIS Benchmark', url: cis_url.to_s
5656
ref 'GCP Docs', url: 'https://cloud.google.com/logging/docs/audit/'

controls/2.02-logging.rb

+1-1
Original file line numberDiff line numberDiff line change
@@ -33,7 +33,7 @@
3333
tag cis_gcp: control_id.to_s
3434
tag cis_version: cis_version.to_s
3535
tag project: gcp_project_id.to_s
36-
tag nist: []
36+
tag nist: %w[AU-4 AU-12]
3737

3838
ref 'CIS Benchmark', url: cis_url.to_s
3939
ref 'GCP Docs', url: 'https://cloud.google.com/logging/docs/reference/tools/gcloud-logging'

controls/2.03-logging.rb

+1-1
Original file line numberDiff line numberDiff line change
@@ -35,7 +35,7 @@
3535
tag cis_gcp: control_id.to_s
3636
tag cis_version: cis_version.to_s
3737
tag project: gcp_project_id.to_s
38-
tag nist: []
38+
tag nist: ['AU-6']
3939

4040
ref 'CIS Benchmark', url: cis_url.to_s
4141
ref 'GCP Docs', url: 'https://cloud.google.com/storage/docs/bucket-lock'

controls/2.04-logging.rb

+1-1
Original file line numberDiff line numberDiff line change
@@ -51,7 +51,7 @@
5151
tag cis_gcp: control_id.to_s
5252
tag cis_version: cis_version.to_s
5353
tag project: gcp_project_id.to_s
54-
tag nist: []
54+
tag nist: ['AU-12']
5555

5656
ref 'CIS Benchmark', url: cis_url.to_s
5757
ref 'GCP Docs', url: 'https://cloud.google.com/logging/docs/logs-based-metrics/'

controls/2.05-logging.rb

+1-1
Original file line numberDiff line numberDiff line change
@@ -33,7 +33,7 @@
3333
tag cis_gcp: control_id.to_s
3434
tag cis_version: cis_version.to_s
3535
tag project: gcp_project_id.to_s
36-
tag nist: []
36+
tag nist: %w[AU-3 AU-12]
3737

3838
ref 'CIS Benchmark', url: cis_url.to_s
3939
ref 'GCP Docs', url: 'https://cloud.google.com/logging/docs/logs-based-metrics/'

controls/2.06-logging.rb

+1-1
Original file line numberDiff line numberDiff line change
@@ -33,7 +33,7 @@
3333
tag cis_gcp: control_id.to_s
3434
tag cis_version: cis_version.to_s
3535
tag project: gcp_project_id.to_s
36-
tag nist: []
36+
tag nist: %w[AU-3 AU-12]
3737

3838
ref 'CIS Benchmark', url: cis_url.to_s
3939
ref 'GCP Docs', url: 'https://cloud.google.com/logging/docs/logs-based-metrics/'

controls/2.07-logging.rb

+1-1
Original file line numberDiff line numberDiff line change
@@ -33,7 +33,7 @@
3333
tag cis_gcp: control_id.to_s
3434
tag cis_version: cis_version.to_s
3535
tag project: gcp_project_id.to_s
36-
tag nist: []
36+
tag nist: %w[AU-3 AU-12]
3737

3838
ref 'CIS Benchmark', url: cis_url.to_s
3939
ref 'GCP Docs', url: 'https://cloud.google.com/logging/docs/logs-based-metrics/'

controls/2.08-logging.rb

+1-1
Original file line numberDiff line numberDiff line change
@@ -35,7 +35,7 @@
3535
tag cis_gcp: control_id.to_s
3636
tag cis_version: cis_version.to_s
3737
tag project: gcp_project_id.to_s
38-
tag nist: []
38+
tag nist: %w[AU-3 AU-12]
3939

4040
ref 'CIS Benchmark', url: cis_url.to_s
4141
ref 'GCP Docs', url: 'https://cloud.google.com/logging/docs/logs-based-metrics/'

controls/2.09-logging.rb

+1-1
Original file line numberDiff line numberDiff line change
@@ -35,7 +35,7 @@
3535
tag cis_gcp: control_id.to_s
3636
tag cis_version: cis_version.to_s
3737
tag project: gcp_project_id.to_s
38-
tag nist: []
38+
tag nist: %w[AU-3 AU-12]
3939

4040
ref 'CIS Benchmark', url: cis_url.to_s
4141
ref 'GCP Docs', url: 'https://cloud.google.com/logging/docs/logs-based-metrics/'

controls/2.10-logging.rb

+1-1
Original file line numberDiff line numberDiff line change
@@ -33,7 +33,7 @@
3333
tag cis_gcp: control_id.to_s
3434
tag cis_version: cis_version.to_s
3535
tag project: gcp_project_id.to_s
36-
tag nist: []
36+
tag nist: %w[AU-3 AU-12]
3737

3838
ref 'CIS Benchmark', url: cis_url.to_s
3939
ref 'GCP Docs', url: 'https://cloud.google.com/logging/docs/logs-based-metrics/'

controls/2.11-logging.rb

+1-1
Original file line numberDiff line numberDiff line change
@@ -38,7 +38,7 @@
3838
tag cis_gcp: control_id.to_s
3939
tag cis_version: cis_version.to_s
4040
tag project: gcp_project_id.to_s
41-
tag nist: []
41+
tag nist: %w[AU-3 AU-12]
4242

4343
ref 'CIS Benchmark', url: cis_url.to_s
4444
ref 'GCP Docs', url: 'https://cloud.google.com/logging/docs/logs-based-metrics/'

controls/3.01-networking.rb

+1-1
Original file line numberDiff line numberDiff line change
@@ -33,7 +33,7 @@
3333
tag cis_gcp: control_id.to_s
3434
tag cis_version: cis_version.to_s
3535
tag project: gcp_project_id.to_s
36-
tag nist: []
36+
tag nist: ['CM-6']
3737

3838
ref 'CIS Benchmark', url: cis_url.to_s
3939
ref 'GCP Docs', url: 'https://cloud.google.com/compute/docs/networking#firewall_rules'

controls/3.02-networking.rb

+1-1
Original file line numberDiff line numberDiff line change
@@ -33,7 +33,7 @@
3333
tag cis_gcp: control_id.to_s
3434
tag cis_version: cis_version.to_s
3535
tag project: gcp_project_id.to_s
36-
tag nist: []
36+
tag nist: ['CM-6']
3737

3838
ref 'CIS Benchmark', url: cis_url.to_s
3939
ref 'GCP Docs', url: 'https://cloud.google.com/compute/docs/networking#creating_a_legacy_network'

controls/3.03-networking.rb

+1-1
Original file line numberDiff line numberDiff line change
@@ -33,7 +33,7 @@
3333
tag cis_gcp: control_id.to_s
3434
tag cis_version: cis_version.to_s
3535
tag project: gcp_project_id.to_s
36-
tag nist: []
36+
tag nist: ['CM-6']
3737

3838
ref 'CIS Benchmark', url: cis_url.to_s
3939
ref 'GCP Docs', url: 'https://cloudplatform.googleblog.com/2017/11/DNSSEC-now-available-in-Cloud-DNS.html'

controls/3.04-networking.rb

+1-1
Original file line numberDiff line numberDiff line change
@@ -35,7 +35,7 @@
3535
tag cis_gcp: control_id.to_s
3636
tag cis_version: cis_version.to_s
3737
tag project: gcp_project_id.to_s
38-
tag nist: []
38+
tag nist: ['CM-6']
3939

4040
ref 'CIS Benchmark', url: cis_url.to_s
4141
ref 'GCP Docs', url: 'https://cloud.google.com/dns/dnssec-advanced#advanced_signing_options'

controls/3.05-networking.rb

+1-1
Original file line numberDiff line numberDiff line change
@@ -35,7 +35,7 @@
3535
tag cis_gcp: control_id.to_s
3636
tag cis_version: cis_version.to_s
3737
tag project: gcp_project_id.to_s
38-
tag nist: []
38+
tag nist: ['CM-6']
3939

4040
ref 'CIS Benchmark', url: cis_url.to_s
4141
ref 'GCP Docs', url: 'https://cloud.google.com/dns/dnssec-advanced#advanced_signing_options'

controls/3.06-networking.rb

+1-1
Original file line numberDiff line numberDiff line change
@@ -33,7 +33,7 @@
3333
tag cis_gcp: control_id.to_s
3434
tag cis_version: cis_version.to_s
3535
tag project: gcp_project_id.to_s
36-
tag nist: ["SC-7"]
36+
tag nist: %w[CM-7 CA-3 SC-7]
3737

3838
ref 'CIS Benchmark', url: cis_url.to_s
3939
ref 'GCP Docs', url: 'https://cloud.google.com/vpc/docs/firewalls#blockedtraffic'

controls/3.07-networking.rb

+1-1
Original file line numberDiff line numberDiff line change
@@ -33,7 +33,7 @@
3333
tag cis_gcp: control_id.to_s
3434
tag cis_version: cis_version.to_s
3535
tag project: gcp_project_id.to_s
36-
tag nist: ["SC-7"]
36+
tag nist: %w[CM-7 CA-3 SC-7]
3737

3838
ref 'CIS Benchmark', url: cis_url.to_s
3939
ref 'GCP Docs', url: 'https://cloud.google.com/vpc/docs/firewalls#blockedtraffic'

controls/3.08-networking.rb

+1-1
Original file line numberDiff line numberDiff line change
@@ -42,7 +42,7 @@
4242
tag cis_gcp: control_id.to_s
4343
tag cis_version: cis_version.to_s
4444
tag project: gcp_project_id.to_s
45-
tag nist: ["SI-4"]
45+
tag nist: %w[AU-12 SI-4]
4646

4747
ref 'CIS Benchmark', url: cis_url.to_s
4848
ref 'GCP Docs', url: 'https://cloud.google.com/vpc/docs/using-flow-logs#enabling_vpc_flow_logging'

controls/3.09-networking.rb

+1-1
Original file line numberDiff line numberDiff line change
@@ -34,7 +34,7 @@
3434
tag cis_gcp: control_id.to_s
3535
tag cis_version: cis_version.to_s
3636
tag project: gcp_project_id.to_s
37-
tag nist: []
37+
tag nist: ['SC-1']
3838

3939
ref 'CIS Benchmark', url: cis_url.to_s
4040
ref 'GCP Docs', url: 'https://cloud.google.com/load-balancing/docs/use-ssl-policies'

controls/4.01-vms.rb

+1-1
Original file line numberDiff line numberDiff line change
@@ -36,7 +36,7 @@
3636
tag cis_gcp: control_id.to_s
3737
tag cis_version: cis_version.to_s
3838
tag project: gcp_project_id.to_s
39-
tag nist: ["AC-6"]
39+
tag nist: %w[AC-2 AC-6]
4040

4141
ref 'CIS Benchmark', url: cis_url.to_s
4242
ref 'GCP Docs', url: 'https://cloud.google.com/compute/docs/access/create-enable-service-accounts-for-instances'

controls/4.02-vms.rb

+1-1
Original file line numberDiff line numberDiff line change
@@ -42,7 +42,7 @@
4242
tag cis_gcp: control_id.to_s
4343
tag cis_version: cis_version.to_s
4444
tag project: gcp_project_id.to_s
45-
tag nist: []
45+
tag nist: %w[AC-2 AC-6]
4646

4747
ref 'CIS Benchmark', url: cis_url.to_s
4848
ref 'GCP Docs', url: 'https://cloud.google.com/compute/docs/access/create-enable-service-accounts-for-instances'

controls/4.03-vms.rb

+1-1
Original file line numberDiff line numberDiff line change
@@ -36,7 +36,7 @@
3636
tag cis_gcp: control_id.to_s
3737
tag cis_version: cis_version.to_s
3838
tag project: gcp_project_id.to_s
39-
tag nist: []
39+
tag nist: ['AC-2']
4040

4141
ref 'CIS Benchmark', url: cis_url.to_s
4242
ref 'GCP Docs', url: 'https://cloud.google.com/compute/docs/instances/adding-removing-ssh-keys'

controls/4.04-vms.rb

+1-1
Original file line numberDiff line numberDiff line change
@@ -33,7 +33,7 @@
3333
tag cis_gcp: control_id.to_s
3434
tag cis_version: cis_version.to_s
3535
tag project: gcp_project_id.to_s
36-
tag nist: []
36+
tag nist: ['AC-2']
3737

3838
ref 'CIS Benchmark', url: cis_url.to_s
3939
ref 'GCP Docs', url: 'https://cloud.google.com/compute/docs/instances/managing-instance-access'

controls/4.05-vms.rb

+1-1
Original file line numberDiff line numberDiff line change
@@ -42,7 +42,7 @@
4242
tag cis_gcp: control_id.to_s
4343
tag cis_version: cis_version.to_s
4444
tag project: gcp_project_id.to_s
45-
tag nist: []
45+
tag nist: ['CM-7']
4646

4747
ref 'CIS Benchmark', url: cis_url.to_s
4848
ref 'GCP Docs', url: 'https://cloud.google.com/compute/docs/instances/interacting-with-serial-console'

controls/4.06-vms.rb

+1-1
Original file line numberDiff line numberDiff line change
@@ -36,7 +36,7 @@
3636
tag cis_gcp: control_id.to_s
3737
tag cis_version: cis_version.to_s
3838
tag project: gcp_project_id.to_s
39-
tag nist: []
39+
tag nist: %w[CM-6 CM-8]
4040

4141
ref 'CIS Benchmark', url: cis_url.to_s
4242
ref 'GCP Docs', url: 'https://cloud.google.com/compute/docs/networking#canipforward'

controls/4.07-vms.rb

+1-1
Original file line numberDiff line numberDiff line change
@@ -42,7 +42,7 @@
4242
tag cis_gcp: control_id.to_s
4343
tag cis_version: cis_version.to_s
4444
tag project: gcp_project_id.to_s
45-
tag nist: []
45+
tag nist: ['SC-1']
4646

4747
ref 'CIS Benchmark', url: cis_url.to_s
4848
ref 'GCP Docs', url: 'https://cloud.google.com/compute/docs/disks/customer-supplied-encryption#encrypt_a_new_persistent_disk_with_your_own_keys'

controls/4.08-vms.rb

+1-1
Original file line numberDiff line numberDiff line change
@@ -54,7 +54,7 @@
5454
tag cis_gcp: control_id.to_s
5555
tag cis_version: cis_version.to_s
5656
tag project: gcp_project_id.to_s
57-
tag nist: []
57+
tag nist: ['SC-1']
5858

5959
ref 'CIS Benchmark', url: cis_url.to_s
6060
ref 'GCP Docs', url: 'https://cloud.google.com/compute/docs/instances/modifying-shielded-vm'

controls/5.01-storage.rb

+1-1
Original file line numberDiff line numberDiff line change
@@ -33,7 +33,7 @@
3333
tag cis_gcp: control_id.to_s
3434
tag cis_version: cis_version.to_s
3535
tag project: gcp_project_id.to_s
36-
tag nist: ["AC-2"]
36+
tag nist: %w[AC-2 CA-3]
3737

3838
ref 'CIS Benchmark', url: cis_url.to_s
3939
ref 'GCP Docs', url: 'https://cloud.google.com/storage/docs/access-control/iam-reference'

0 commit comments

Comments
 (0)