Detections
Analytics
Ensure that multi-factor authentication is enabled for all non-service accounts
LOW
Description
Description:
Setup multi-factor authentication for Google Cloud Platform accounts.
Rationale:
Multi-factor authentication requires more than one mechanism to authenticate a user. This secures user logins from attackers exploiting stolen or weak credentials.
None.
Remediation
For each Google Cloud Platform project:
Step 1: Identify non-service accounts.
Step 2: Setup multi-factor authentication for each account.
Policy Details
Rule Reference ID: AC_GCP_0195
CSP: GCP
Remediation Available: No
Domain: Identity and Access Management
Resource: google_compute_instance
Resource Category: Compute
Resource Type: Virtual Machine