No Default Network

Default network should not be created at project level

The default network which is provided for a project contains multiple insecure firewall rules which allow ingress to the project’s infrastructure. Creation of this network should therefore be disabled.

Impact

Exposure of internal infrastructure/services to public internet

Recommended Actions

Follow the appropriate remediation steps below to resolve the issue.

1
2
3
4
5
6
7

 resource "google_project" "good_example" {
   name       = "My Project"
   project_id = "your-project-id"
   org_id     = "1234567"
   auto_create_network = false
 }