{
  "Provider": "gcp",
  "CheckID": "compute_instance_block_project_wide_ssh_keys_disabled",
  "CheckTitle": "Ensure “Block Project-Wide SSH Keys” Is Enabled for VM Instances",
  "CheckType": [],
  "ServiceName": "compute",
  "SubServiceName": "",
  "ResourceIdTemplate": "",
  "Severity": "medium",
  "ResourceType": "VMInstance",
  "Description": "It is recommended to use Instance specific SSH key(s) instead of using common/shared project-wide SSH key(s) to access Instances.",
  "Risk": "Project-wide SSH keys are stored in Compute/Project-meta-data. Project wide SSH keys can be used to login into all the instances within project. Using project-wide SSH keys eases the SSH key management but if compromised, poses the security risk which can impact all the instances within project.",
  "RelatedUrl": "",
  "Remediation": {
    "Code": {
      "CLI": "https://docs.bridgecrew.io/docs/bc_gcp_networking_8#cli-command",
      "NativeIaC": "",
      "Other": "https://www.trendmicro.com/cloudoneconformity/knowledge-base/gcp/ComputeEngine/enable-block-project-wide-ssh-keys.html",
      "Terraform": "https://docs.bridgecrew.io/docs/bc_gcp_networking_8#cli-command"
    },
    "Recommendation": {
      "Text": "It is recommended to use Instance specific SSH keys which can limit the attack surface if the SSH keys are compromised.",
      "Url": "https://cloud.google.com/compute/docs/instances/adding-removing-ssh-keys"
    }
  },
  "Categories": [],
  "DependsOn": [],
  "RelatedTo": [],
  "Notes": ""
}
