Ensure that all the Google Cloud virtual machine instances necessary for your application stack are launched from an approved machine image, known as golden machine image, in order to enforce security best practices, consistency, and save time when scaling your cloud application. The approved machine image must be defined in the conformity rule settings, on the Trend Micro Cloud One™ – Conformity account console.
A machine image is a Compute Engine resource that stores all the configuration, metadata, permissions, and data from one or more disks required to create a virtual machine (VM) instance. An approved machine image is a custom virtual machine image that contains a pre-configured OS and a well-defined stack of server software, fully configured to run your application. Using approved (golden) machine images to launch new VM instances within your Google Cloud Platform (GCP) project brings major benefits such as fast and stable application deployment and scaling, secure application stack upgrades, and versioning.
To determine if your Google Cloud virtual machine instances are being launched from an approved image only, perform the following actions:Note: Getting the machine image details for VM instances using Google Cloud Platform (GCP) Command Line Interface (CLI) is not currently supported.
Remediation / Resolution
To meet security and compliance requirements within your organization and deploy Google Cloud virtual machine instances from approved machine images only, re-create the required VM instances using the approved (golden) machine image by perform the following operations:
Unlock the Remediation Steps
Gain free unlimited access
to our full Knowledge Base
Over 750 rules & best practices
You are auditing:
Approved Virtual Machine Image in Use
Risk level: Medium