GCP-Compute-Instance-Level-SSH-Only
- naveen
Owned by naveen
Dec 08, 2021
1 min read
Loading data...
Severity : High
Description : To support the principle of least privilege and prevent potential privilege escalation it is recommended that instances are not give access to project-wide SSH keys through instance metadata.
Remediation Steps : Ensure project-wide SSH keys are blocked for all instances.
Blue Hexagon Proprietary